Analysis

  • max time kernel
    149s
  • max time network
    3s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20240611-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    26-11-2024 03:34

General

  • Target

    eb5d7617ce5a7aa557feeecb9b4c284e27cc660341d9b201f32d35c5aa658b39.elf

  • Size

    148KB

  • MD5

    b782a8c3e9ac5bbc1e76dbe80fa68321

  • SHA1

    40d62822f500e16a7dc503ea01556af9b14f1121

  • SHA256

    eb5d7617ce5a7aa557feeecb9b4c284e27cc660341d9b201f32d35c5aa658b39

  • SHA512

    fae8849c0d8bd072bd04f86062f4200e3ab05bcd3d4e2b43ee9a257afaaff79d554b5949094f64a0212066404c792cbe597247ff046c4850b0d1e946fc089d68

  • SSDEEP

    3072:8EBvlkr8KuZHfu6ZSEWiOHYIj33wZ6yjl/KLvj4pr3t8g1ZRR5Qo8s9VsfiHU0Ws:8yhpVsfiHUdmYSBhX48

Score
6/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/eb5d7617ce5a7aa557feeecb9b4c284e27cc660341d9b201f32d35c5aa658b39.elf
    /tmp/eb5d7617ce5a7aa557feeecb9b4c284e27cc660341d9b201f32d35c5aa658b39.elf
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:710

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads