Analysis
-
max time kernel
145s -
max time network
149s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240418-en -
resource tags
arch:mipsimage:debian9-mipsbe-20240418-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
14-11-2024 02:21
Behavioral task
behavioral1
Sample
4478f6be2fa3dac7bdd17c60c8187aa120d25966d8ac0901de13a1e182467aa1.elf
Resource
debian9-mipsbe-20240418-en
General
-
Target
4478f6be2fa3dac7bdd17c60c8187aa120d25966d8ac0901de13a1e182467aa1.elf
-
Size
131KB
-
MD5
9ac817bdf5192fbc64b39eb072a257b0
-
SHA1
43943d83e526906f0f9b455656ca7575586e9dac
-
SHA256
4478f6be2fa3dac7bdd17c60c8187aa120d25966d8ac0901de13a1e182467aa1
-
SHA512
2156b485118e8014da33f56518bdcf4ac185476f754200b7af45a23144b9a01d68e9ff3f43f8bb257c1442c8f0d742497564278c7599f076be01e252132ba274
-
SSDEEP
3072:jGTyrDxJWwAfr9f3yJddxUEJmTDmjOrWcpu3NJFARtRVJhGvaZqhZYiDhB/ZZ9Ba:C+nZSZwnJeUmkASFxBKvXZX
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
Processes:
4478f6be2fa3dac7bdd17c60c8187aa120d25966d8ac0901de13a1e182467aa1.elfdescription ioc process File opened for reading /proc/net/route 4478f6be2fa3dac7bdd17c60c8187aa120d25966d8ac0901de13a1e182467aa1.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes:
4478f6be2fa3dac7bdd17c60c8187aa120d25966d8ac0901de13a1e182467aa1.elfdescription ioc process File opened for reading /proc/net/route 4478f6be2fa3dac7bdd17c60c8187aa120d25966d8ac0901de13a1e182467aa1.elf