Analysis
-
max time kernel
140s -
max time network
142s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240226-en -
resource tags
arch:mipsimage:debian9-mipsbe-20240226-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
02/04/2024, 06:17
Behavioral task
behavioral1
Sample
cf85fb4e6139f12914e30a8bedb52a5a.elf
Resource
debian9-mipsbe-20240226-en
2 signatures
150 seconds
General
-
Target
cf85fb4e6139f12914e30a8bedb52a5a.elf
-
Size
183KB
-
MD5
cf85fb4e6139f12914e30a8bedb52a5a
-
SHA1
9faef9802001a822493adca959cf18f57d6af9d7
-
SHA256
47b6b6eacf2b5d74e2cb0bc94ab3f93c7475ebe4669d2a4fd1d1186cfb9a3aaf
-
SHA512
0eaeade2a25ed9146bd041369b8005dec1471ebc5c8e670819e8ba87027a958a82738ecc433c04ce80e1044c4ebb8f67d3ca2fc36c57c676f042fe976befbeae
-
SSDEEP
3072:UhZRj5n9EmzUyMhD5hWTt5s1qAuhmv8uqx1BVnKoe:mjrYZD5hWJ5Lhmv8uqx1BVnKoe
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route cf85fb4e6139f12914e30a8bedb52a5a.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route cf85fb4e6139f12914e30a8bedb52a5a.elf