Analysis

  • max time kernel
    147s
  • max time network
    150s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20231215-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20231215-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    19/12/2023, 22:42

General

  • Target

    21033deec9d5509c5dd8bdf0ad41d466

  • Size

    176KB

  • MD5

    21033deec9d5509c5dd8bdf0ad41d466

  • SHA1

    3900e098eaf10ec8f2e3a09a1f3aa8135f0aa38f

  • SHA256

    f61676bb0621ab04c38050f3cc61427c0a2d436ec5b6eed31752d3fde0b63838

  • SHA512

    b4b04013d0419add4e45bcfe1ac55e3633559015903f75fd5f41e7bc60706c05619cb016e3d5f7e5f072166cd1bfd7855f48435e7ba1d44c7a3f898b654ded87

  • SSDEEP

    3072:HZlz4q6gKduZwBky6sURpyf+lsqDpyik8s:5lnvKdZjSpyf+lsqDpyik8s

Score
7/10

Malware Config

Signatures

  • Changes its process name 1 IoCs
  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/21033deec9d5509c5dd8bdf0ad41d466
    /tmp/21033deec9d5509c5dd8bdf0ad41d466
    1⤵
    • Changes its process name
    • Reads system routing table
    • Reads system network configuration
    PID:702

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads