Analysis
-
max time kernel
146s -
max time network
149s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240418-en -
resource tags
-
submitted
26-12-2024 21:12
General
-
Target
kitsune.mips.elf
-
Size
141KB
-
MD5
18f4ecf2aab433794d2bf7786a407ae7
-
SHA1
066a1fe2abfed8d66c7404bba74e47e303ebe65b
-
SHA256
cb88495d6fbb34e33dc60249e7ad0995d509e0261559a6f382c48334fed6c19b
-
SHA512
15ccfd090dd43d4fb223fd39fdffb49b3a88cf51ec04d57a5934de2cc43ec1c63a6cf0bca23d6792ca930bf60f1e712821f7f1f2b80c5bdc9705b004ec0cd3c9
-
SSDEEP
3072:sGGNZfCos2pA4FC65hvikTam0/5ApYADn:hACyK4065hvi9m0/5ASADn
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
-
System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
Processes
-
/tmp/kitsune.mips.elf/tmp/kitsune.mips.elf1⤵
- Reads system routing table
- Reads system network configuration
- System Network Configuration Discovery