6951d74f14687b746efb6bd6b1e1413a25d2fc8627542cd602f8184ee4652f7e

Analysis

max time kernel
134s
max time network
137s
platform
debian-9_mipsel
resource
debian9-mipsel-20240226-en
resource tags

arch:mipselimage:debian9-mipsel-20240226-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
15/03/2024, 17:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

efe38c16ac3ac7c440594e98ac5c750e.elf
Size

188KB
MD5

efe38c16ac3ac7c440594e98ac5c750e
SHA1

6f10f3bd20a2b8a626e83033d7bbe06ba00996a1
SHA256

6951d74f14687b746efb6bd6b1e1413a25d2fc8627542cd602f8184ee4652f7e
SHA512

d2913530a5a46b7b73717372b40b015567c5c56b6a52ef31a5f91c918318bea08991f8100dd69923d22245356e85406f538ded6a8134df12dcf45f415cb03557
SSDEEP

3072:CTF0suwcqQtKYHrIG5hVC0SR/hmv8uqx1LVnKoe:Cesuwo1LIG5hV6R/hmv8uqx1LVnKoe

Score

6^/10

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	efe38c16ac3ac7c440594e98ac5c750e.elf

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	efe38c16ac3ac7c440594e98ac5c750e.elf

/tmp/efe38c16ac3ac7c440594e98ac5c750e.elf
/tmp/efe38c16ac3ac7c440594e98ac5c750e.elf
1⤵
- Reads system routing table
- Reads system network configuration
PID:710

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads