Analysis
-
max time kernel
140s -
max time network
149s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240418-en -
resource tags
arch:mipsimage:debian9-mipsbe-20240418-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
24-11-2024 01:45
Behavioral task
behavioral1
Sample
1be75e423982f2ff813a1d41a075d6c1da2c9d97b0e58afa0913ebb68c792a99.elf
Resource
debian9-mipsbe-20240418-en
General
-
Target
1be75e423982f2ff813a1d41a075d6c1da2c9d97b0e58afa0913ebb68c792a99.elf
-
Size
123KB
-
MD5
c85913cd0c167fb9db8377e4b02c3bc3
-
SHA1
baf34e1cbb34b2c645dddb8a559cef37a178482b
-
SHA256
1be75e423982f2ff813a1d41a075d6c1da2c9d97b0e58afa0913ebb68c792a99
-
SHA512
44af59467e510469a41aa6ab32456aae13dd955bd18f2ba791b46f891ad1122351607cbff05df1ffba7d087ca1c2df649c7f579f27fa67b50b6a672cc04d2565
-
SSDEEP
1536:M7je1TMGq+f+AQ2rK7zeXeReXe8V2rK7Ie+u60GAzQj1l72HBeLEd5jFeagrmW+i:Ted0W0MZQHbd5BeagrmW+IFB1Dt1hR/
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
Processes:
1be75e423982f2ff813a1d41a075d6c1da2c9d97b0e58afa0913ebb68c792a99.elfdescription ioc Process File opened for reading /proc/net/route 1be75e423982f2ff813a1d41a075d6c1da2c9d97b0e58afa0913ebb68c792a99.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes:
1be75e423982f2ff813a1d41a075d6c1da2c9d97b0e58afa0913ebb68c792a99.elfdescription ioc Process File opened for reading /proc/net/route 1be75e423982f2ff813a1d41a075d6c1da2c9d97b0e58afa0913ebb68c792a99.elf