Analysis
-
max time kernel
127s -
max time network
139s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240611-en -
resource tags
-
submitted
10-12-2024 12:28
General
-
Target
m-.ips.elf
-
Size
158KB
-
MD5
4cb021ed5e9c420c536c898b9e9e902b
-
SHA1
e89de6b33cef48619d26cfc323de01cd1cb18907
-
SHA256
9ec7e76cf0d3408623f38046198ea057d741843d3fe3c706355e1a1635604e00
-
SHA512
f2324c561e2535de27318c329689f43f2d92bb7a10c055719d5354110a0df6423efc4efea5985bdf13e2fdd127b88ebea6f672c1b3cae542fd2a5ddf916d20e6
-
SSDEEP
3072:E6wbe7nWIYPnSUAMjRb63TsR9kHLbzLII1mXv+PYGR2:F2jtyHLbQomXv+wGR2
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
-
System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
Processes
-
/tmp/m-.ips.elf/tmp/m-.ips.elf1⤵
- Reads system routing table
- Reads system network configuration
- System Network Configuration Discovery