6ac57203130207f6d1b33fd710356dbe5dd56fee6ddebe607a8dc3ee152bccfb

Analysis

max time kernel
151s
max time network
156s
platform
debian-12_mipsel
resource
debian12-mipsel-20240418-en
resource tags

arch:mipselimage:debian12-mipsel-20240418-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
submitted
10-12-2024 17:22

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

m-p.s-l.Sakura.elf
Size

123KB
MD5

397bcfb06013b5359f9e344b30f9a961
SHA1

2c531fb14397438f68dea2ad02c769b0270b9f47
SHA256

6ac57203130207f6d1b33fd710356dbe5dd56fee6ddebe607a8dc3ee152bccfb
SHA512

3c72765117c9be73f67d9b539d6e1fc7e1a4e0a89fd876bdcb43fa23da7a47f02ac544c7ea6abb2cef0fec50a2a6dedee4e4c46d371d0fd6d3a1c6b3b9ce381c
SSDEEP

1536:/UHeTxCAms/Y8Zm3lKYA43gMJwSkJ8EpK+DzUh8rmW+IFB1Df11hR/:/UyLqAmgMJM8EI+Dw8rmW+IFB1Dt1hR/

Score

6^/10

discovery

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	m-p.s-l.Sakura.elf

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	m-p.s-l.Sakura.elf

/tmp/m-p.s-l.Sakura.elf
/tmp/m-p.s-l.Sakura.elf
1⤵
- Reads system routing table
- Reads system network configuration
PID:748

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads