1be75e423982f2ff813a1d41a075d6c1da2c9d97b0e58afa0913ebb68c792a99

Analysis

max time kernel
147s
max time network
147s
platform
debian-9_mips
resource
debian9-mipsbe-20240729-en
resource tags

arch:mipsimage:debian9-mipsbe-20240729-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
22-11-2024 18:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

m-i.p-s.Logicnet.elf
Size

123KB
MD5

c85913cd0c167fb9db8377e4b02c3bc3
SHA1

baf34e1cbb34b2c645dddb8a559cef37a178482b
SHA256

1be75e423982f2ff813a1d41a075d6c1da2c9d97b0e58afa0913ebb68c792a99
SHA512

44af59467e510469a41aa6ab32456aae13dd955bd18f2ba791b46f891ad1122351607cbff05df1ffba7d087ca1c2df649c7f579f27fa67b50b6a672cc04d2565
SSDEEP

1536:M7je1TMGq+f+AQ2rK7zeXeReXe8V2rK7Ie+u60GAzQj1l72HBeLEd5jFeagrmW+i:Ted0W0MZQHbd5BeagrmW+IFB1Dt1hR/

Score

6^/10

discovery

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	m-i.p-s.Logicnet.elf

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	m-i.p-s.Logicnet.elf

/tmp/m-i.p-s.Logicnet.elf
/tmp/m-i.p-s.Logicnet.elf
1⤵
- Reads system routing table
- Reads system network configuration
PID:719

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads