Analysis

  • max time kernel
    147s
  • max time network
    150s
  • platform
    debian-9_mipsel
  • resource
    debian9-mipsel-20240226-en
  • resource tags

    arch:mipselimage:debian9-mipsel-20240226-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    30/03/2024, 02:09

General

  • Target

    4e1b008eda17d2c057157e0c6d533d7948729d31e0d76c4cbfc8a565236e4d52.elf

  • Size

    154KB

  • MD5

    e1999a446f33992721b9df541f3fe535

  • SHA1

    28ff7d2736c65d89f40ce5b0adeca5be17e1a7e3

  • SHA256

    4e1b008eda17d2c057157e0c6d533d7948729d31e0d76c4cbfc8a565236e4d52

  • SHA512

    fa99fc23ba6de57ecbb0c9ea3f4b88eded0e1df2a6a81c0b4316756a8c146110da06f0549af1e10319f96e539ebb9bf5c4dba8f7a5fb04ff7ec7278a93f88bab

  • SSDEEP

    3072:No9q1+5V/JjAjyvvK5G0rrpOWmnVv5A46/Dc:No9aUjAjyvvKE0rYWmnVv5AL/Dc

Score
7/10

Malware Config

Signatures

  • Changes its process name 1 IoCs
  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/4e1b008eda17d2c057157e0c6d533d7948729d31e0d76c4cbfc8a565236e4d52.elf
    /tmp/4e1b008eda17d2c057157e0c6d533d7948729d31e0d76c4cbfc8a565236e4d52.elf
    1⤵
    • Changes its process name
    • Reads system routing table
    • Reads system network configuration
    PID:709

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads