Analysis
-
max time kernel
149s -
max time network
147s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240611-en -
resource tags
-
submitted
20/02/2025, 18:04
General
-
Target
hidakibest.mips.elf
-
Size
141KB
-
MD5
24fd1bd291809e50e03dff752d3112d9
-
SHA1
a8bd45f666ce4c8d55375754553df0fd1ec6a08a
-
SHA256
165059466add39037ed7af5682f7f9a8492e8da0174a8003281c171a8ba9b529
-
SHA512
7bbd19622ea13fcc2d3201915ae430dc5b2d6ebdfd340dd71230b2ff69d4b8f0130cb8e9b8708c485b60181336b58ebcb743b7f40492a9e55dafa121e5ae2dc4
-
SSDEEP
3072:sGGNZfCos2pA4FCa5hvikTam0/5ApYADn:hACyK40a5hvi9m0/5ASADn
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
-
System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
Processes
-
/tmp/hidakibest.mips.elf/tmp/hidakibest.mips.elf1⤵
- Reads system routing table
- Reads system network configuration
- System Network Configuration Discovery