0f60859f887446023b8f5d3b19b13ac50392dbb36392592845731a0a644a860e

Analysis

max time kernel
150s
max time network
154s
platform
debian-9_mipsel
resource
debian9-mipsel-20240226-en
resource tags

arch:mipselimage:debian9-mipsel-20240226-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
03-12-2024 20:12

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

m-p.s-l.Logicnet.elf
Size

123KB
MD5

d111e3a8f38d3693ff456e90374cacfb
SHA1

5ab917a6142162ad9958811a134a0a6e93d2ceef
SHA256

0f60859f887446023b8f5d3b19b13ac50392dbb36392592845731a0a644a860e
SHA512

c2340d517452c6231a6b29c9e51a404ba162f257d4be87f689a1221afc18c289620a422aa9c5847f3d0bcc76779dfa02bab9f51f83a99e266ae708884d740378
SSDEEP

1536:/UHeTxCAms/Y8Zm3lKYA43gMJwSkJ8Ep++DGGJrmW+IFB1Df11hR/:/UyLqAmgMJM8Eg+DGsrmW+IFB1Dt1hR/

Score

6^/10

discovery

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	m-p.s-l.Logicnet.elf

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	m-p.s-l.Logicnet.elf

/tmp/m-p.s-l.Logicnet.elf
/tmp/m-p.s-l.Logicnet.elf
1⤵
- Reads system routing table
- Reads system network configuration
PID:697

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads