4c0845c2649a27ad310b22244dbe8263cbe4d71a93b6c4121d89a28a78cd36cc

Analysis

max time kernel
101s
max time network
112s
platform
debian-12_mipsel
resource
debian12-mipsel-20240221-en
resource tags

arch:mipselimage:debian12-mipsel-20240221-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
submitted
14-12-2024 10:47

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

rebirth.mpsl.elf
Size

136KB
MD5

aec5c347a91a8b0469a987741a0fe829
SHA1

706fe8b1c86de3e479e781b4ddf6fb3e7a542655
SHA256

4c0845c2649a27ad310b22244dbe8263cbe4d71a93b6c4121d89a28a78cd36cc
SHA512

1c222493d918dbbfa769d9b858fa2fe6af271c48bd83350f2a33c6b8b3a1dcaea22d16479f44c0e0bf06fd3af3cf74c5a619b427b66fed5288359c64a5d756eb
SSDEEP

1536:76ejdyUhayRB4pa4ggYJ7vOTlhnxhxPYsXm/KBgvYYiCh:7IyX4pNL7xhx3mCBgAYiCh

Score

6^/10

discovery

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	rebirth.mpsl.elf

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	rebirth.mpsl.elf

/tmp/rebirth.mpsl.elf
/tmp/rebirth.mpsl.elf
1⤵
- Reads system routing table
- Reads system network configuration
PID:737

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads