Analysis
-
max time kernel
106s -
max time network
111s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240611-en -
resource tags
arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
14-11-2024 02:11
Behavioral task
behavioral1
Sample
2164fe06b8fbc8d57b2f35c546d10bec5bbc29a3f4712453947d33277329147f.elf
Resource
debian9-mipsbe-20240611-en
General
-
Target
2164fe06b8fbc8d57b2f35c546d10bec5bbc29a3f4712453947d33277329147f.elf
-
Size
131KB
-
MD5
80a4b7f8106e53e2eb88722c9ddf428e
-
SHA1
f84716ca9339f128c18ec4aef13ae59012c94a81
-
SHA256
2164fe06b8fbc8d57b2f35c546d10bec5bbc29a3f4712453947d33277329147f
-
SHA512
2bbcd100366bde5991e3e63a43f557b665d9eec7a00cacd6fb12b20605f1c78de69fa594180e79fd237068d5c3fb97ce1ecf9afb7e5aa50fd9de11f6f6ca1b4b
-
SSDEEP
3072:jGTyrDxJWwAfr9f3yJdJxDEhmLDOj2rOcBu/NBFYR15dRJevCZi3hKiDhB/ZZ9BF:CvnZSZJnJeUmkASFxBKvXZX
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
Processes:
2164fe06b8fbc8d57b2f35c546d10bec5bbc29a3f4712453947d33277329147f.elfdescription ioc process File opened for reading /proc/net/route 2164fe06b8fbc8d57b2f35c546d10bec5bbc29a3f4712453947d33277329147f.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes:
2164fe06b8fbc8d57b2f35c546d10bec5bbc29a3f4712453947d33277329147f.elfdescription ioc process File opened for reading /proc/net/route 2164fe06b8fbc8d57b2f35c546d10bec5bbc29a3f4712453947d33277329147f.elf