Analysis
-
max time kernel
150s -
max time network
155s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240611-en -
resource tags
-
submitted
29-11-2024 10:12
General
-
Target
hidakibest.mips.elf
-
Size
141KB
-
MD5
ed1e3ef7c8548829afb1a66c78ad2758
-
SHA1
1f6b2a80a8a4cee96c7d78b26d0d9e1cf36ba9be
-
SHA256
a7f819cfceeba392ccfa8e4bf558dbc1d8372a4807b3ffca6d2ccde9adf93d30
-
SHA512
fa95d42f560f4eddb09ddfbea5782ecaccddbc870e048212265b087f90db65c532c6499662b24f2305ae62ea93f52d8bde65e0ed21944499ed388cc00b9d2b92
-
SSDEEP
3072:sGGNZfCos2pA4FC/5hvikTam0/5ApYADn:hACyK40/5hvi9m0/5ASADn
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
-
System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
Processes
-
/tmp/hidakibest.mips.elf/tmp/hidakibest.mips.elf1⤵
- Reads system routing table
- Reads system network configuration
- System Network Configuration Discovery