Analysis
-
max time kernel
90s -
max time network
140s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240729-en -
resource tags
-
submitted
20/02/2025, 19:58
General
-
Target
felkawtf.mips.elf
-
Size
118KB
-
MD5
ed04c5cae8f614e010ecd49c43beb7d7
-
SHA1
911c0c5dca9f715b2a6278141529079c472ecf9b
-
SHA256
5baa4ccd39546027550ae86a1a2e4c10f4a2613d8918b66705c4ad61697e8a0b
-
SHA512
3729296982edc90953f66ccdd34b9253fa648abaa467a6cf00e595c047d5f58d81ecd71b1eff01293aaf52db1cd1aeb5d356acf33dd4edbbaa6ce6934c64eb99
-
SSDEEP
1536:47je1TNWquXQ8xe3byv2rKlKgsrzOQuQZeKdSRf6YkzCwSUmkixFxfC7cgjQ:XT5rzOQuQFsf6YxwSUmkixFxfKcgjQ
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
-
System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
Processes
-
/tmp/felkawtf.mips.elf/tmp/felkawtf.mips.elf1⤵
- Reads system routing table
- Reads system network configuration
- System Network Configuration Discovery