73192227b58f1b928cb02982440122924b76c9066e1db7ee7eedfed1dd26c260

Analysis

max time kernel
150s
max time network
157s
platform
debian-12_mipsel
resource
debian12-mipsel-20240418-en
resource tags

arch:mipselimage:debian12-mipsel-20240418-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
submitted
11-11-2024 12:37

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

m-p.s-l.Sakura.elf
Size

123KB
MD5

56847c2e6ac887904709c8c4a9da87de
SHA1

7d6c576ab4a539259c2756ea8bb2f88eaf568009
SHA256

73192227b58f1b928cb02982440122924b76c9066e1db7ee7eedfed1dd26c260
SHA512

b63dce6768d4ecae370f5e450c591630c7e5638180bcc09e95f519c4ad8f0a4ebc5b0eb5caaccc1703f63460620735b8615f0d4196ac8ffea863cf3eca91e7ae
SSDEEP

1536:/UHeTxCAms/Y8Zm3lKYA43gMJwSkJ8Epr+DzUh8rmW+IFB1Df11hR/:/UyLqAmgMJM8EJ+Dw8rmW+IFB1Dt1hR/

Score

6^/10

discovery

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	m-p.s-l.Sakura.elf

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	m-p.s-l.Sakura.elf

/tmp/m-p.s-l.Sakura.elf
/tmp/m-p.s-l.Sakura.elf
1⤵
- Reads system routing table
- Reads system network configuration
PID:742

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads