Analysis
-
max time kernel
140s -
max time network
149s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240729-en -
resource tags
arch:mipsimage:debian9-mipsbe-20240729-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
12-11-2024 10:24
Behavioral task
behavioral1
Sample
5b556a857c75be36e532de4afb4012d9a12631434f1c0c2c9800b64af10526f5.elf
Resource
debian9-mipsbe-20240729-en
General
-
Target
5b556a857c75be36e532de4afb4012d9a12631434f1c0c2c9800b64af10526f5.elf
-
Size
123KB
-
MD5
98628a7b2a7f7ebf96586566030319ac
-
SHA1
d0a5c22f82dc5325ed1a0e91966eb3d2d3ccc815
-
SHA256
5b556a857c75be36e532de4afb4012d9a12631434f1c0c2c9800b64af10526f5
-
SHA512
fccd3a63bc7d2467928aff8534481084f802d49cda573710d45bee6115d5cb5586a5394811d18607b3b65aa0cb1c4d768d80713396914dc343ebea23cd5cedc8
-
SSDEEP
1536:M7je1TMGq+f+AQ2rK7zeXeReXe8V2rK7Ie+u60GAzQj1l72HBe6EdWfRZrmW+IFj:Ted0W0MZQHod6RZrmW+IFB1Dt1hR/
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
Processes:
5b556a857c75be36e532de4afb4012d9a12631434f1c0c2c9800b64af10526f5.elfdescription ioc process File opened for reading /proc/net/route 5b556a857c75be36e532de4afb4012d9a12631434f1c0c2c9800b64af10526f5.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes:
5b556a857c75be36e532de4afb4012d9a12631434f1c0c2c9800b64af10526f5.elfdescription ioc process File opened for reading /proc/net/route 5b556a857c75be36e532de4afb4012d9a12631434f1c0c2c9800b64af10526f5.elf