Analysis

  • max time kernel
    140s
  • max time network
    142s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20240226-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20240226-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    02/04/2024, 06:17

General

  • Target

    cf85fb4e6139f12914e30a8bedb52a5a.elf

  • Size

    183KB

  • MD5

    cf85fb4e6139f12914e30a8bedb52a5a

  • SHA1

    9faef9802001a822493adca959cf18f57d6af9d7

  • SHA256

    47b6b6eacf2b5d74e2cb0bc94ab3f93c7475ebe4669d2a4fd1d1186cfb9a3aaf

  • SHA512

    0eaeade2a25ed9146bd041369b8005dec1471ebc5c8e670819e8ba87027a958a82738ecc433c04ce80e1044c4ebb8f67d3ca2fc36c57c676f042fe976befbeae

  • SSDEEP

    3072:UhZRj5n9EmzUyMhD5hWTt5s1qAuhmv8uqx1BVnKoe:mjrYZD5hWJ5Lhmv8uqx1BVnKoe

Score
6/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/cf85fb4e6139f12914e30a8bedb52a5a.elf
    /tmp/cf85fb4e6139f12914e30a8bedb52a5a.elf
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:705

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads