1e023fe4a2af596cf00e5ca0abc44b9a0d0f351cbdf9bcb05b07ce9f19dd3630

Analysis

max time kernel
135s
max time network
141s
platform
debian-12_mipsel
resource
debian12-mipsel-20240221-en
resource tags

arch:mipselimage:debian12-mipsel-20240221-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
submitted
30-12-2024 01:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

rebirth.mpsl.elf
Size

136KB
MD5

ae82d51f10b0467984c65c78860576dd
SHA1

e90ce8bf42ee200efd4123d146907dad73d0f939
SHA256

1e023fe4a2af596cf00e5ca0abc44b9a0d0f351cbdf9bcb05b07ce9f19dd3630
SHA512

49f6f6c86cbd2de6190996d751fbb3b798ffd50ed737e076f662c19c3e67d69ba25843b2df6289b63ac94494cc4735a4521251a1146a6ed16744dc31fdb32d58
SSDEEP

1536:76ejNyUhayRB4pa4ggYJ7vOTlr7xhxPYsXm/KBgvYYiCh:74yX4pNLllhx3mCBgAYiCh

Score

6^/10

discovery

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	rebirth.mpsl.elf

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	rebirth.mpsl.elf

/tmp/rebirth.mpsl.elf
/tmp/rebirth.mpsl.elf
1⤵
- Reads system routing table
- Reads system network configuration
PID:750

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads