Analysis

  • max time kernel
    150s
  • max time network
    153s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20231215-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20231215-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    19-12-2023 22:34

General

  • Target

    146e9fcb6c9643a440a817edb0e15932

  • Size

    203KB

  • MD5

    146e9fcb6c9643a440a817edb0e15932

  • SHA1

    cf77c3d267e1aec0e91124c82a6769f1b54ded65

  • SHA256

    2b91214062dfcb01c55e034c5001304c1b4b85e9c9a128d97c9f23dcead8d412

  • SHA512

    ee8fffc8915c2758668b8a95961f01da63fd75bea6af5b400c10b40f4cd45ebd3154f655451ed974a03f77e8d8130cbf7cafea34fcae49caed6e00685fb039c4

  • SSDEEP

    3072:9FNQgm+tjhMElms3ttPmbZ2FrdpmhmsPP4Rp:LNYAtFmbZUzmhmsPP4Rp

Score
7/10

Malware Config

Signatures

  • Changes its process name 1 IoCs
  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/146e9fcb6c9643a440a817edb0e15932
    /tmp/146e9fcb6c9643a440a817edb0e15932
    1⤵
    • Changes its process name
    • Reads system routing table
    • Reads system network configuration
    PID:711

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads