Analysis
-
max time kernel
149s -
max time network
151s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240611-en -
resource tags
-
submitted
19/02/2025, 05:37
General
-
Target
c8514ef7562bcfe21c8c63ce9d88394ad4341d4aed606eb5c81ed37c05606d5a.elf
-
Size
181KB
-
MD5
17093ead9364b8a8758a7f7e21c89ce2
-
SHA1
87777d538359c8348e71c6591a710a9629b76ed6
-
SHA256
c8514ef7562bcfe21c8c63ce9d88394ad4341d4aed606eb5c81ed37c05606d5a
-
SHA512
623b304da3117baa765d03a43056fa947568ac6bdc61354036ddcfd0aabf624bc42fa51163eedc7f61e9743658d1c7c16422842dd745d963d139770f57ea266f
-
SSDEEP
3072:RUkUQWXBwRUY5Ab9mGxY/5JFvMuVZA+DdVun3bhS8IRzbenrFjr//URgFIFmlsFx:kQYTagFIFmlsFmzVu6nm7
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Changes its process name 1 IoCs
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/c8514ef7562bcfe21c8c63ce9d88394ad4341d4aed606eb5c81ed37c05606d5a.elf/tmp/c8514ef7562bcfe21c8c63ce9d88394ad4341d4aed606eb5c81ed37c05606d5a.elf1⤵
- Reads system routing table
- Changes its process name
- Reads system network configuration