Analysis
-
max time kernel
150s -
max time network
154s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240611-en -
resource tags
-
submitted
22-12-2024 14:57
General
-
Target
hidakibest.mips.elf
-
Size
141KB
-
MD5
a2f2e318660621d3770d1f55789199d5
-
SHA1
46c7c72f1eb438259c5c0d2c74a9ecbd4070578e
-
SHA256
412dfa6621f9156ace7e40661d5a8d2c60451592f297037730ae00b359923537
-
SHA512
e322837fdb04deb162adb2bf91f99c49e61b08081f7616974a55920db75bd1e08b175ecfee96d0f9dc26d75dce20ccde6b33c14fe0823dd1d16edc1c5d441e7b
-
SSDEEP
3072:sGGNZfCos2pA4FCV5hvikTam0/5ApYADn:hACyK40V5hvi9m0/5ASADn
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
-
System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
Processes
-
/tmp/hidakibest.mips.elf/tmp/hidakibest.mips.elf1⤵
- Reads system routing table
- Reads system network configuration
- System Network Configuration Discovery