Analysis
-
max time kernel
91s -
max time network
143s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20240226-en -
resource tags
-
submitted
20/02/2025, 19:58
General
-
Target
felkawtf.mipsel.elf
-
Size
118KB
-
MD5
76678bcff664a00b3c2bf1fcb26f6f39
-
SHA1
5a7c3aa434fee7c7189df7f1798a7fb81afbaf59
-
SHA256
0383b4942b3ac84082423eec521d1ae720dcabcae04130bd03da5bbe3bcb110e
-
SHA512
f5fb359912a9889b3c01939cc8c7a1c5dff1b44cbdb0cb4f2032459548107f58d447d35e4661faced04ed3abe3731cd1128f465587d8d4d4f4857352f5d1e45d
-
SSDEEP
1536:UPeTk+z1T8RoZaM9ZIAZsUEo8IgwagKWqFMtOFqUmkixFxfC7cgjQ:USJZa+zst1wa/ywFqUmkixFxfKcgjQ
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
-
System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
Processes
-
/tmp/felkawtf.mipsel.elf/tmp/felkawtf.mipsel.elf1⤵
- Reads system routing table
- Reads system network configuration
- System Network Configuration Discovery