6e365b90e0bd20833fa1282c59839635ae53dd8445b58651ba8c72d73659509c

Analysis

max time kernel
144s
max time network
165s
platform
debian-12_mipsel
resource
debian12-mipsel-20240221-en
resource tags

arch:mipselimage:debian12-mipsel-20240221-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
submitted
06-12-2024 15:07

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

mipsel.elf
Size

130KB
MD5

0cd9cc7d699134bedcbf376fec8269b0
SHA1

3ad95a6bace4fa25201585d7d180ea120b0fa5f8
SHA256

6e365b90e0bd20833fa1282c59839635ae53dd8445b58651ba8c72d73659509c
SHA512

6e023761b41f19556a35c75667be8a3e69668b122f52d620e1484018d9b0cdc0273044da1875b8f9879d346bdc82f2b39a87ef1e2d9526bab6ca4e583bf0d5cd
SSDEEP

1536:Omuejqh4HybHWuOdd9BORHgUYZVw0vXynGKuB7mbN+G5QW5BPgm8o1B65HFqR:OmCYBf5TpmZPQW5VgmF1BUHFqR

Score

6^/10

discovery

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	mipsel.elf

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	mipsel.elf

System Network Configuration Discovery 1 TTPs 1 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
741	mipsel.elf

/tmp/mipsel.elf
/tmp/mipsel.elf
1⤵
- Reads system routing table
- Reads system network configuration
- System Network Configuration Discovery
PID:741

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads