Analysis
-
max time kernel
146s -
max time network
149s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240611-en -
resource tags
-
submitted
12-12-2024 02:02
General
-
Target
fruit.mips.elf
-
Size
141KB
-
MD5
fdc9e59d5da2d36585a1edbf7c4031f7
-
SHA1
c1815b4d4afd66acd3a63543a6df955c09654e6a
-
SHA256
b1309d9bd486829324fcf7e5af0366b058cc40fd40fdb270ea93c0cb42ede3ba
-
SHA512
58a8a291584511e41db8264488dd98793a45ff4b0e9508aa661498dad36be02487ba85fe379304d60cb64894c5edd1c14a1a659f17f45a5140f3ffa87f3801e5
-
SSDEEP
3072:sGGNZfCos2pA4FC85hvikTam0/5ApYADn:hACyK4085hvi9m0/5ASADn
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
-
System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
Processes
-
/tmp/fruit.mips.elf/tmp/fruit.mips.elf1⤵
- Reads system routing table
- Reads system network configuration
- System Network Configuration Discovery