Analysis
-
max time kernel
131s -
max time network
133s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20240418-en -
resource tags
arch:mipselimage:debian9-mipsel-20240418-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
23-11-2024 02:56
Behavioral task
behavioral1
Sample
c30958ba3b70e3e12fb2b7a16dbc096137b6662e9da31fd0573500786a65b3a0.elf
Resource
debian9-mipsel-20240418-en
General
-
Target
c30958ba3b70e3e12fb2b7a16dbc096137b6662e9da31fd0573500786a65b3a0.elf
-
Size
123KB
-
MD5
d79befc0aca223ee5a2aaa65d32c6243
-
SHA1
b73516536528d271a5522f706edc8305c8b51cb1
-
SHA256
c30958ba3b70e3e12fb2b7a16dbc096137b6662e9da31fd0573500786a65b3a0
-
SHA512
7ccbd16a420c6cc033c32d435c301286a238daf9c6ac91c050e952198809bb25b7945acbf8f4d0dbd738f08f4fbda1020ffcda57faaa268b7178a46305c191a1
-
SSDEEP
1536:/UHeTxCAms/Y8Zm3lKYA43gMJwSkJ8Epc+DGGJrmW+IFB1Df11hR/:/UyLqAmgMJM8EW+DGsrmW+IFB1Dt1hR/
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
Processes:
c30958ba3b70e3e12fb2b7a16dbc096137b6662e9da31fd0573500786a65b3a0.elfdescription ioc process File opened for reading /proc/net/route c30958ba3b70e3e12fb2b7a16dbc096137b6662e9da31fd0573500786a65b3a0.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes:
c30958ba3b70e3e12fb2b7a16dbc096137b6662e9da31fd0573500786a65b3a0.elfdescription ioc process File opened for reading /proc/net/route c30958ba3b70e3e12fb2b7a16dbc096137b6662e9da31fd0573500786a65b3a0.elf