Overview

overview

10

Static

static

10

653c4d265c...e5.elf

debian-9-mips

7

Analysis

  • max time kernel
    144s
  • max time network
    147s
  • platform
    linux_mips
  • resource
    debian9-mipsbe-en-20211208
  • resource tags

    arch:mipsimage:debian9-mipsbe-en-20211208kernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    26/05/2023, 05:53

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    653c4d265c63e601585ec5279c4b8fe5.elf

  • Size

    183KB

  • MD5

    653c4d265c63e601585ec5279c4b8fe5

  • SHA1

    b3cf136c40b99a7011bd655ccc2fb550aa947a73

  • SHA256

    ade5fd3b5560e3319b1ac22030745086e824aa533aebeef9f8c821c288bfe585

  • SHA512

    19a34c3eacc369797608c925a596906e1c10debb5b1d7ddcb958340d20b32322955795ce43a7ebe5250b463a97f951505edf59901d0ab032c3ebb13e24b32a8f

  • SSDEEP

    3072:7oMlg/xfqxr622tyetJ8add9QzhsMwdB8XSdfi+8qLw/i+L9k:Hl8xfQzZetJ8addQxwdDdfi+8qLwa+Ly

Score
7/10

Malware Config

Signatures

  • Changes its process name 1 IoCs
  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/653c4d265c63e601585ec5279c4b8fe5.elf
    /tmp/653c4d265c63e601585ec5279c4b8fe5.elf
    1⤵
    • Changes its process name
    • Reads system routing table
    • Reads system network configuration
    PID:325

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads