Analysis
-
max time kernel
140s -
max time network
150s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240611-en -
resource tags
-
submitted
30/09/2024, 18:43
General
-
Target
hidakibest.mips.elf
-
Size
141KB
-
MD5
a19235f98fbb6e1954ca0c6461cc51e3
-
SHA1
6c5db7576216aebc4c0a4fd3d4a4bf9cd5a46b2a
-
SHA256
d38b2dfbb0d25eee7ad645ad161e59db04acd24cc3afd7534b53de2d40399236
-
SHA512
5844381f4dd95b95142df789404006ddd0f3f634bbdfc366905bc8e6b2a6374c74ec70e7d3097147b01a07cc685a16c81622ed1fd2693419530ae47c790f3803
-
SSDEEP
3072:sGGNZfCos2pA4FC+5hvikTam0/5ApYADn:hACyK40+5hvi9m0/5ASADn
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
-
System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
Processes
-
/tmp/hidakibest.mips.elf/tmp/hidakibest.mips.elf1⤵
- Reads system routing table
- Reads system network configuration
- System Network Configuration Discovery