Analysis
-
max time kernel
150s -
max time network
152s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240611-en -
resource tags
arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
23-11-2024 02:48
Behavioral task
behavioral1
Sample
abfb1f25303a694884dff6d6dd014770acacc351d8220788d7d557ca1dd3dbe1.elf
Resource
debian9-mipsbe-20240611-en
debian-9-mips
2 signatures
150 seconds
General
-
Target
abfb1f25303a694884dff6d6dd014770acacc351d8220788d7d557ca1dd3dbe1.elf
-
Size
141KB
-
MD5
8130c110686532ec3fd61403cc68cd1b
-
SHA1
0483ea89c3acb25d4dc16f879d30468aee65d8f3
-
SHA256
abfb1f25303a694884dff6d6dd014770acacc351d8220788d7d557ca1dd3dbe1
-
SHA512
1bebd71273975063ba3fe4d7b7829257575a8c3347d026418aa4cd9113514e1940fba2ad4a4325aa4f6ee1bf51bd1581436e007147a30b53cf6b62e93742a60c
-
SSDEEP
3072:sK5MNZfCos2pA4FCV5h/qkTam0/5ApYADn:t5uCyK40V5h/q9m0/5ASADn
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
Processes:
abfb1f25303a694884dff6d6dd014770acacc351d8220788d7d557ca1dd3dbe1.elfdescription ioc process File opened for reading /proc/net/route abfb1f25303a694884dff6d6dd014770acacc351d8220788d7d557ca1dd3dbe1.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes:
abfb1f25303a694884dff6d6dd014770acacc351d8220788d7d557ca1dd3dbe1.elfdescription ioc process File opened for reading /proc/net/route abfb1f25303a694884dff6d6dd014770acacc351d8220788d7d557ca1dd3dbe1.elf