Analysis
-
max time kernel
117s -
max time network
122s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240611-en -
resource tags
arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
15-12-2024 02:07
Behavioral task
behavioral1
Sample
1ee538fe93d2a30e6d01c651f504877e5d15ec2caec021bb14caa39d840128bc.elf
Resource
debian9-mipsbe-20240611-en
debian-9-mips
2 signatures
150 seconds
General
-
Target
1ee538fe93d2a30e6d01c651f504877e5d15ec2caec021bb14caa39d840128bc.elf
-
Size
136KB
-
MD5
3bb6aadea62c4f0688c9abbd228da86d
-
SHA1
c8859b783a434db25f9a44b82a6896b23de07f05
-
SHA256
1ee538fe93d2a30e6d01c651f504877e5d15ec2caec021bb14caa39d840128bc
-
SHA512
8cd78db3e948c816fa888db6f2c391bedbd76bee66d0832f2ee9e75e7f53c979bfbc0f3ed1b6d0a9cce0e5cd8bedb008194ab7fba897887d9e69f14707f47c72
-
SSDEEP
1536:HHfGlk6Mau3GaXIM2rKbU6Ul5gioHLfPti2dSImNEz7ugf7hoWlNDsorH4hs29NA:+FO3PtiJn8ugN9sazoVmCBgAYiCh
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route 1ee538fe93d2a30e6d01c651f504877e5d15ec2caec021bb14caa39d840128bc.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route 1ee538fe93d2a30e6d01c651f504877e5d15ec2caec021bb14caa39d840128bc.elf