Analysis
-
max time kernel
146s -
max time network
148s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240611-en -
resource tags
-
submitted
11-12-2024 22:17
General
-
Target
fruit.mips.elf
-
Size
141KB
-
MD5
02f8364b9a0634dc0660d9e13dc36812
-
SHA1
d25c02d45b5dfa9ca3204cbee04f082c19a8ef86
-
SHA256
9f2128346e65a692ca03c810f804a07c2455d7455a9bcd51599b9c0937cd5d1a
-
SHA512
2961469c56eb021cf0a6de8348237e4f3b2814c62249facfc1924565361974d71681ecef6855b40e83ca3ff836c268b7823a1b1a7673de8b8a3e6a343bc114c0
-
SSDEEP
3072:sGGNZfCos2pA4FCM5hvikTam0/5ApYADn:hACyK40M5hvi9m0/5ASADn
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
-
System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
Processes
-
/tmp/fruit.mips.elf/tmp/fruit.mips.elf1⤵
- Reads system routing table
- Reads system network configuration
- System Network Configuration Discovery