6ab442f45a043883b5b7535267a03ecad585b9d243f9c51e68b68aa2c3503fad

Analysis

max time kernel
151s
max time network
151s
platform
debian-12_mipsel
resource
debian12-mipsel-20240221-en
resource tags

arch:mipselimage:debian12-mipsel-20240221-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
submitted
11-01-2025 10:32

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

sss.elf
Size

110KB
MD5

fd5543a1b6da49cb5d4e89ba574b7b4a
SHA1

aa3712673caad0c3aaa981441f7bdf54aad05417
SHA256

6ab442f45a043883b5b7535267a03ecad585b9d243f9c51e68b68aa2c3503fad
SHA512

e6df9f79a710ba9b4f1b2e3a04623df6efd4b2da8c3002ef49b1c58e5070e1924edc418d9dc74502951c6d393680792ad7ca839db9045da7354a1ea5dc0ba388
SSDEEP

1536:3LeTkl+xRnSMOEr9ZTun5ATI3fMgHfA9DFqUmkiSFxfC7xbXe:3oSZEr9f6fMT/qUmkiSFxfKxbXe

Score

6^/10

discovery

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	sss.elf

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	sss.elf

/tmp/sss.elf
/tmp/sss.elf
1⤵
- Reads system routing table
- Reads system network configuration
PID:747

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads