c30958ba3b70e3e12fb2b7a16dbc096137b6662e9da31fd0573500786a65b3a0

Analysis

max time kernel
150s
max time network
152s
platform
debian-9_mipsel
resource
debian9-mipsel-20240611-en
resource tags

arch:mipselimage:debian9-mipsel-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
22/11/2024, 18:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

m-p.s-l.Logicnet.elf
Size

123KB
MD5

d79befc0aca223ee5a2aaa65d32c6243
SHA1

b73516536528d271a5522f706edc8305c8b51cb1
SHA256

c30958ba3b70e3e12fb2b7a16dbc096137b6662e9da31fd0573500786a65b3a0
SHA512

7ccbd16a420c6cc033c32d435c301286a238daf9c6ac91c050e952198809bb25b7945acbf8f4d0dbd738f08f4fbda1020ffcda57faaa268b7178a46305c191a1
SSDEEP

1536:/UHeTxCAms/Y8Zm3lKYA43gMJwSkJ8Epc+DGGJrmW+IFB1Df11hR/:/UyLqAmgMJM8EW+DGsrmW+IFB1Dt1hR/

Score

6^/10

discovery

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	m-p.s-l.Logicnet.elf

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	m-p.s-l.Logicnet.elf

/tmp/m-p.s-l.Logicnet.elf
/tmp/m-p.s-l.Logicnet.elf
1⤵
- Reads system routing table
- Reads system network configuration
PID:712

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads