8696fc8155d0567fe7b4cdd7650b0a2596362874dba469a7022b1d8f1b3ad829

Analysis

max time kernel
153s
max time network
166s
platform
debian-12_mipsel
resource
debian12-mipsel-20240221-en
resource tags

arch:mipselimage:debian12-mipsel-20240221-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
submitted
13-11-2024 12:07

Target

m-p.s-l.ISIS.elf
Size

131KB
MD5

540ef836455f4094bbb22c4ee954948a
SHA1

dbcbd28e51449f976b671373e28869244e691f50
SHA256

8696fc8155d0567fe7b4cdd7650b0a2596362874dba469a7022b1d8f1b3ad829
SHA512

3cd4a8a3be4920ee164969e999b5efbb7f2c7747b09bad01d0743c125da95aff462d4c5031c25f456268fac3d385d86ee1da7b41f55a42c6a0b0ac8336b34572
SSDEEP

1536:o2beTpNb9DERkLMurNpZ3efJp68E1wYqdvd00PUmkVmSFxBC7vXZX:o2cNJLlrvJF1yvdlPUmkASFxBKvXZX

Score

6^/10

discovery

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
discovery

Internet Connection Discovery
T1016.001

Processes:

m-p.s-l.ISIS.elf

description ioc process

File opened for reading /proc/net/route m-p.s-l.ISIS.elf
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
discovery

Internet Connection Discovery
T1016.001

Processes:

m-p.s-l.ISIS.elf

description ioc process

File opened for reading /proc/net/route m-p.s-l.ISIS.elf

description	ioc	process
File opened for reading	/proc/net/route	m-p.s-l.ISIS.elf

description	ioc	process
File opened for reading	/proc/net/route	m-p.s-l.ISIS.elf

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact