94c011704cfc587872cf723c8fb48605b57f7de48c7f1854d0cbe4699e5da329

Analysis

max time kernel
141s
max time network
143s
platform
debian-9_mips
resource
debian9-mipsbe-20240418-en
resource tags

arch:mipsimage:debian9-mipsbe-20240418-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
02/07/2024, 05:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
qkdjdjj22.mips.elf
Size 209KB
Sample240702-glbe2syglb
SHA256 94c011704cfc587872cf723c8fb48605b57f7de48c7f1854d0cbe4699e5da329
MD5 fdb2c3c77ac5fcdb3e3a358bc5d0c566
SHA1 6f0c1e828a1d83ed63099db2b694b6c0be308f2a
SHA512 f017fa7c5317fe104e8d8edbc600012a6cc9f764e7b40cb266433a42f9afa16179a72ee13b14bc76893209690d326de2cb32c16686c94d63e03d289e4f29bc3d
SSDEEP 3072:3XC9j6w2ZQgoYJlQeRmhDvy2uSNbtmWu+R9ask0QcYbr5hRBg1cmrpy6n9Nn:3SDCzcYbr5hR5mrpy6n9Nn
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	qkdjdjj22.mips.elf

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	qkdjdjj22.mips.elf

/tmp/qkdjdjj22.mips.elf
/tmp/qkdjdjj22.mips.elf
1⤵
- Reads system routing table
- Reads system network configuration
PID:704

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads