Analysis
-
max time kernel
149s -
max time network
156s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240611-en -
resource tags
-
submitted
04-12-2024 23:32
General
-
Target
hidakibest.mips.elf
-
Size
141KB
-
MD5
f2f96c59f84874aa5a97d8a53863da5c
-
SHA1
02498ccabb49c535fe27c3ad4e6909567d997475
-
SHA256
382dd8c9aa4c5bf15e9963e28df0803de3003c8afac6460c30bfdc28b90d0103
-
SHA512
9829e28fb877ec9161a5a1ae6bfb83a1a8f5263a1f78a9bbaf2b5b0be739358d24c364e0690c831ca0c34f8f365637d3e11ef6085b1d62f8c2f4b5aa03df055f
-
SSDEEP
3072:sGGNZfCos2pA4FCh5hvikTam0/5ApYADn:hACyK40h5hvi9m0/5ASADn
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
-
System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
Processes
-
/tmp/hidakibest.mips.elf/tmp/hidakibest.mips.elf1⤵
- Reads system routing table
- Reads system network configuration
- System Network Configuration Discovery