2164fe06b8fbc8d57b2f35c546d10bec5bbc29a3f4712453947d33277329147f

Analysis

max time kernel
122s
max time network
125s
platform
debian-9_mips
resource
debian9-mipsbe-20240611-en
resource tags

arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
13-11-2024 18:17

Target

m-i.p-s.ISIS.elf
Size

131KB
MD5

80a4b7f8106e53e2eb88722c9ddf428e
SHA1

f84716ca9339f128c18ec4aef13ae59012c94a81
SHA256

2164fe06b8fbc8d57b2f35c546d10bec5bbc29a3f4712453947d33277329147f
SHA512

2bbcd100366bde5991e3e63a43f557b665d9eec7a00cacd6fb12b20605f1c78de69fa594180e79fd237068d5c3fb97ce1ecf9afb7e5aa50fd9de11f6f6ca1b4b
SSDEEP

3072:jGTyrDxJWwAfr9f3yJdJxDEhmLDOj2rOcBu/NBFYR15dRJevCZi3hKiDhB/ZZ9BF:CvnZSZJnJeUmkASFxBKvXZX

Score

6^/10

discovery

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
discovery

Internet Connection Discovery
T1016.001

Processes:

m-i.p-s.ISIS.elf

description ioc process

File opened for reading /proc/net/route m-i.p-s.ISIS.elf
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
discovery

Internet Connection Discovery
T1016.001

Processes:

m-i.p-s.ISIS.elf

description ioc process

File opened for reading /proc/net/route m-i.p-s.ISIS.elf

description	ioc	process
File opened for reading	/proc/net/route	m-i.p-s.ISIS.elf

description	ioc	process
File opened for reading	/proc/net/route	m-i.p-s.ISIS.elf

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact