2855fd87da89cae077362a64212e958890708dddc84e409dc9db8a8e1894cd18

Analysis

max time kernel
7s
max time network
112s
platform
debian-12_mipsel
resource
debian12-mipsel-20240221-en
resource tags

arch:mipselimage:debian12-mipsel-20240221-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
submitted
01/07/2024, 04:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
hidakibest.mpsl.elf
Size 141KB
Sample240701-e2h4qazbjk
SHA256 2855fd87da89cae077362a64212e958890708dddc84e409dc9db8a8e1894cd18
MD5 691053c7315cc44d879fc74f4b5c76a9
SHA1 5bf1f24b12e353d79dd638b45e4e5e3bfa99c892
SHA512 1630c68509b19405450e164fc8d36d245f730ebf481187e8aacdb6700e54c4ae2827925fe699319ab3758a48bc9de7f6431f22457157eb7efd8bd4c3f648eedc
SSDEEP 3072:lBXpqf9VHGn7vsd5htpRvHpVFm0/5ApYADn:llp4Wvsd5htvp7m0/5ASADn
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	hidakibest.mpsl.elf

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	hidakibest.mpsl.elf

/tmp/hidakibest.mpsl.elf
/tmp/hidakibest.mpsl.elf
1⤵
- Reads system routing table
- Reads system network configuration
PID:733

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads