Analysis
-
max time kernel
120s -
max time network
154s -
platform
debian-12_mipsel -
resource
debian12-mipsel-20240418-en -
resource tags
-
submitted
28-11-2024 17:42
General
-
Target
mipsel.elf
-
Size
123KB
-
MD5
1dc704be2a194e6f16b4432e7ee2d8c0
-
SHA1
1b9ec5e42ae20b5ea1327b269cf38ffb5c7d91a8
-
SHA256
803eb1ce8f646ee182f26f2105ffe9aff0051ea975718e249ad6696bb6dc95d2
-
SHA512
485452317b819a46f8fb84787a8eb4cedcbdf66fde74d14c6c5b015da2fb227cdf140b46f67d088094e61005122e61d38681aa0a8d5bfba53abc5123567d0e20
-
SSDEEP
1536:/UHeTxCAms/Y8Zm3lKYA43gMJwSkJ8EpR+DlIrmW+IFB1Df11hR/:/UyLqAmgMJM8E/+DlIrmW+IFB1Dt1hR/
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
-
System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
Processes
-
/tmp/mipsel.elf/tmp/mipsel.elf1⤵
- Reads system routing table
- Reads system network configuration
- System Network Configuration Discovery