795628ee91fce16c178849675ce3bf071925976fb08e0432265f9c93901b064f

Analysis

max time kernel
0s
max time network
120s
platform
linux_mips
resource
debian9-mipsbe-en-20211208
resource tags

arch:mipsimage:debian9-mipsbe-en-20211208kernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
08-04-2023 23:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

e1762eb8cb535400397dd876bdd7d02a.elf
Size

110KB
MD5

e1762eb8cb535400397dd876bdd7d02a
SHA1

184bcce7b93289cc2ada0cbef296ea15d974fffe
SHA256

795628ee91fce16c178849675ce3bf071925976fb08e0432265f9c93901b064f
SHA512

29ee341a34ecb7a57ca4e81e3333e4d5844cd7076680037afbf651d0ba03abaf2f1c3e413081739d64428eb183c60fc1cbb94ef718470cd31fab7a562a22b4f9
SSDEEP

1536:V7j+1TuBq+bkYQg2rKlJWl/SgEThaAClfGemoJnimWt0zFufCy/02vI:okrwSgE0tlfUoVimWOzFufJ02vI

Score

7^/10

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery

T1016

description	ioc	Process
/proc/net/route	/proc/net/route	e1762eb8cb535400397dd876bdd7d02a.elf

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery

T1016

description	ioc	Process
/proc/net/route	/proc/net/route	e1762eb8cb535400397dd876bdd7d02a.elf

/tmp/e1762eb8cb535400397dd876bdd7d02a.elf
/tmp/e1762eb8cb535400397dd876bdd7d02a.elf
1⤵
- Reads system routing table
- Reads system network configuration
PID:320

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads