Analysis
-
max time kernel
109s -
max time network
115s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240418-en -
resource tags
-
submitted
22-12-2024 15:02
General
-
Target
hidakibest.mips.elf
-
Size
111KB
-
MD5
0faba175f8b037661975056bed631c15
-
SHA1
668150ff8d38aeb805394a1169607facc7c79d4e
-
SHA256
3c8123a8a0ec8b8282782106dd5bc2279367732377813fa93d383dbedd5fc9f1
-
SHA512
a6657212b3fc60d8ae90cb37b4530a11be86e2f2910d404583f50c0433b66a9209e258536a2ec8f7dbc69fbcd6d05e18618b19c3b51fe3d705e1292c6bbce4c8
-
SSDEEP
3072:DWmzrbF74jl5hU8tRreU4gQKdwwzF9GhsRiAe:DLzrJ8l5hU8t2KdwwzF9GhsRiAe
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
-
System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
Processes
-
/tmp/hidakibest.mips.elf/tmp/hidakibest.mips.elf1⤵
- Reads system routing table
- Reads system network configuration
- System Network Configuration Discovery