Analysis
-
max time kernel
138s -
max time network
144s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240611-en -
resource tags
-
submitted
30-12-2024 01:18
General
-
Target
rebirth.mips.elf
-
Size
136KB
-
MD5
234c5311320c240ccbe1a35e5a04154a
-
SHA1
ec2b491526c556265889aeb0b40f876c0e800c01
-
SHA256
d30bc71e2cac4197133475e93a6c11157a3dcef3cc4f80bdc36aeb5bb9957e3f
-
SHA512
ee0febb99d6f118bacf19f9261122f43e3372a595a33ffdbe5dcc7b07d9068a363febd15895146521683b48cb8ccb016197de3a7d9c3a8b6dbf840910b2fb76a
-
SSDEEP
1536:DHfGlkuMau3GanIg2rK/c6U1J8iEHLfPti2dSImNEz7ugf7hoWlNDsKrj4hs29NA:Kx+/PtiJn8ugN9s4XoVmCBgAYiCh
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
-
System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
Processes
-
/tmp/rebirth.mips.elf/tmp/rebirth.mips.elf1⤵
- Reads system routing table
- Reads system network configuration
- System Network Configuration Discovery