Analysis
-
max time kernel
91s -
max time network
95s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240729-en -
resource tags
-
submitted
13-12-2024 09:19
General
-
Target
roze.mips.elf
-
Size
209KB
-
MD5
419aade96c12dfea0260ba505fb31b5b
-
SHA1
564e5f24382c87b24e0d2fb6e2705ecc6f29fd60
-
SHA256
f1bd061af699e21be35d9dd3d873f93e5eea01085fb9cc90684d5657936ecf75
-
SHA512
a1467a609d96c4845e7a18fc7c7da629c6eb8c98ea42c510bf822034e4f16b9a2e3c4fc731ef5e581b35194a3417dceffcbde5b56baf23b0f290f69ed981cbe6
-
SSDEEP
3072:3XC9j6w2ZQgoYJlQelShPb+iSWhvJ6CeWRd9soUQcI7s5h2Bk1cmrpy6n9Nn:3SnfTcI7s5h21mrpy6n9Nn
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
-
System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
Processes
-
/tmp/roze.mips.elf/tmp/roze.mips.elf1⤵
- Reads system routing table
- Reads system network configuration
- System Network Configuration Discovery