f38878b1dd95934ab1e8d894aa11317319c6a6cd55e3d4b2d72efdd9cb1d1fb2

Analysis

max time kernel
145s
max time network
156s
platform
debian-12_mipsel
resource
debian12-mipsel-20240221-en
resource tags

arch:mipselimage:debian12-mipsel-20240221-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
submitted
09-01-2025 07:12

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

sst.elf
Size

143KB
MD5

b29f8e477d6e5d7aa741c679a33efdbb
SHA1

22ebc155cf234fbf032d260d70d2fd04991d8164
SHA256

f38878b1dd95934ab1e8d894aa11317319c6a6cd55e3d4b2d72efdd9cb1d1fb2
SHA512

f0c65553e6b79bea1d8958a8ae76d8e33dd63925feabc855d0d4d6025fca39aedf5bbb2d1c9148a40aee2ef41551c134b87508f981b025f5e544a59209a8f9b0
SSDEEP

3072:DgFB3V3nMKVA0oYc6Bgqgyy5ULjo5LGOPdsu3:Dg31nZUTYLvyULjo5LGOPdsu3

Score

6^/10

discovery

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	sst.elf

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	sst.elf

/tmp/sst.elf
/tmp/sst.elf
1⤵
- Reads system routing table
- Reads system network configuration
PID:745

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads