5b556a857c75be36e532de4afb4012d9a12631434f1c0c2c9800b64af10526f5

Analysis

max time kernel
148s
max time network
151s
platform
debian-9_mips
resource
debian9-mipsbe-20240611-en
resource tags

arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
11-11-2024 12:37

Target

m-i.p-s.Sakura.elf
Size

123KB
MD5

98628a7b2a7f7ebf96586566030319ac
SHA1

d0a5c22f82dc5325ed1a0e91966eb3d2d3ccc815
SHA256

5b556a857c75be36e532de4afb4012d9a12631434f1c0c2c9800b64af10526f5
SHA512

fccd3a63bc7d2467928aff8534481084f802d49cda573710d45bee6115d5cb5586a5394811d18607b3b65aa0cb1c4d768d80713396914dc343ebea23cd5cedc8
SSDEEP

1536:M7je1TMGq+f+AQ2rK7zeXeReXe8V2rK7Ie+u60GAzQj1l72HBe6EdWfRZrmW+IFj:Ted0W0MZQHod6RZrmW+IFB1Dt1hR/

Score

6^/10

discovery

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
discovery

Internet Connection Discovery
T1016.001

Processes:

m-i.p-s.Sakura.elf

description ioc process

File opened for reading /proc/net/route m-i.p-s.Sakura.elf
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
discovery

Internet Connection Discovery
T1016.001

Processes:

m-i.p-s.Sakura.elf

description ioc process

File opened for reading /proc/net/route m-i.p-s.Sakura.elf

description	ioc	process
File opened for reading	/proc/net/route	m-i.p-s.Sakura.elf

description	ioc	process
File opened for reading	/proc/net/route	m-i.p-s.Sakura.elf

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact