Analysis
-
max time kernel
150s -
max time network
89s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240611-en -
resource tags
-
submitted
31-12-2024 07:47
General
-
Target
chernobyl.mips.elf
-
Size
149KB
-
MD5
76cd360f074eaa5d8287bb0762aab991
-
SHA1
72da777df5b6d7794efa05d87e5528d0c45e1403
-
SHA256
e6177852038d2130936a6c52ae274f813d5338f94b4f27faa6e19f7db19cbd46
-
SHA512
897e406c0982fa347e945653a5af9db7876004ff0e54a9a2bb5cde10bb0df3b52172a54481726d974621291deaae0c29df90e2333eb81c6fe30f15e190cdfd38
-
SSDEEP
3072:VV7mFOvf5veB/7PxPWDlVEsgixj8YjmujymeYBn3:VV7mQ+TpWvIivjmujymtBn3
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
-
System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
Processes
-
/tmp/chernobyl.mips.elf/tmp/chernobyl.mips.elf1⤵
- Reads system routing table
- Reads system network configuration
- System Network Configuration Discovery