2a9bc822a567acd10d811144d0c9094c82bbd469400cf0f5d6d2347e9ea476ca

Analysis

max time kernel
150s
max time network
155s
platform
debian-9_mips
resource
debian9-mipsbe-20240611-en
resource tags

arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
02-09-2024 04:33

Target

hidakibest.mips.elf
Size

141KB
MD5

96edc2bb63c60080a01c49420066e06a
SHA1

d0e579a8cdfaf628526077bd033c086e1579723f
SHA256

2a9bc822a567acd10d811144d0c9094c82bbd469400cf0f5d6d2347e9ea476ca
SHA512

612d795cb4d4e6d4015910a14b2ab64161cd5ab29b55afb1ca30943a522bfa921df4af6f85eaf440ca3c2de282517b6b972d3a5b57b169736d2498d86ffaafe7
SSDEEP

3072:sGGNZfCos2pA4FCv5hvikTam0/5ApYADn:hACyK40v5hvi9m0/5ASADn

Score

6^/10

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery
T1016

Processes:

hidakibest.mips.elf

description ioc process

File opened for reading /proc/net/route hidakibest.mips.elf
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery
T1016

Processes:

hidakibest.mips.elf

description ioc process

File opened for reading /proc/net/route hidakibest.mips.elf

description	ioc	process
File opened for reading	/proc/net/route	hidakibest.mips.elf

description	ioc	process
File opened for reading	/proc/net/route	hidakibest.mips.elf

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact