e553f5333b2fb4bf0ae45f4f2cbc23d0be9b3d054852ace3bd5869d4ef812e1e

Analysis

max time kernel
73s
max time network
9s
platform
debian-12_mipsel
resource
debian12-mipsel-20240221-en
resource tags

arch:mipselimage:debian12-mipsel-20240221-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
submitted
25-11-2024 07:13

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

pXdN91.mipsel.elf
Size

148KB
MD5

46bc16a930c4ab1eea60a9fd7e049726
SHA1

5ba886e16b333dfd1ca106685d7c848efaf47f6e
SHA256

e553f5333b2fb4bf0ae45f4f2cbc23d0be9b3d054852ace3bd5869d4ef812e1e
SHA512

9f3585f31ceb0de7a0553db607560da4b3c5589d1cb8acb946e6bdb5f31439fd095dae2c1202ef9f19125840621219c1be13998ee49fc69f400f2712a6a2c36c
SSDEEP

1536:fy1aejr49iGX7UuzeTyfZxOGW2VLvRcG7oNN7S6edzr+1jCY+S1N/mS5SB/5HX48:q17mY52VGS1m+Y9N/mYSBBHX48

Score

6^/10

discovery

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	pXdN91.mipsel.elf

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	pXdN91.mipsel.elf

System Network Configuration Discovery 1 TTPs 1 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
744	pXdN91.mipsel.elf

/tmp/pXdN91.mipsel.elf
/tmp/pXdN91.mipsel.elf
1⤵
- Reads system routing table
- Reads system network configuration
- System Network Configuration Discovery
PID:744

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads