Analysis
-
max time kernel
146s -
max time network
148s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240729-en -
resource tags
arch:mipsimage:debian9-mipsbe-20240729-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
28-11-2024 03:45
Behavioral task
behavioral1
Sample
ec08299037a58bc0f253a84e0f628faa59cb23cd24a1d25711314695649c6782.elf
Resource
debian9-mipsbe-20240729-en
debian-9-mips
2 signatures
150 seconds
General
-
Target
ec08299037a58bc0f253a84e0f628faa59cb23cd24a1d25711314695649c6782.elf
-
Size
141KB
-
MD5
2eb75cd67dddb1819088d5438645a537
-
SHA1
1d12cca1751fec45c640e52ad51b4a96f5f30890
-
SHA256
ec08299037a58bc0f253a84e0f628faa59cb23cd24a1d25711314695649c6782
-
SHA512
b697c84f7d182e226689877ffcb28341628021c11deb292759313d4d43d09c2ac3bc0a91e3f28dfbe474124f7b9e13a71c6e82759c611a45fcb20bb3c0411a72
-
SSDEEP
3072:sGGNZfCos2pA4FCL5hvikTam0/5ApYADn:hACyK40L5hvi9m0/5ASADn
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
Processes:
ec08299037a58bc0f253a84e0f628faa59cb23cd24a1d25711314695649c6782.elfdescription ioc Process File opened for reading /proc/net/route ec08299037a58bc0f253a84e0f628faa59cb23cd24a1d25711314695649c6782.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes:
ec08299037a58bc0f253a84e0f628faa59cb23cd24a1d25711314695649c6782.elfdescription ioc Process File opened for reading /proc/net/route ec08299037a58bc0f253a84e0f628faa59cb23cd24a1d25711314695649c6782.elf