Analysis
-
max time kernel
90s -
max time network
2s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240729-en -
resource tags
-
submitted
21/02/2025, 09:32
General
-
Target
skid.mips.elf
-
Size
112KB
-
MD5
242f71a5342c4a7933d085d461aa2247
-
SHA1
03950315e39bb463ceba4756c2f68fa77fb84a36
-
SHA256
499c7673bad0592c6204d04eb65ace35d4495681f565b9c9b2af71c3995d70fc
-
SHA512
aa1a35ea5ee66beee0e3014d337309441f06fa74d068cbfd46d2e376ab138e304e08f95d4e707e11330a27d0f1bdc50a2c203d8167958460477290a74300b806
-
SSDEEP
3072:0VW0fIHznlZA5h50qBkxmkizF9GhsRiAe:0APT3A5h50ZxmkizF9GhsRiAe
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
-
System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
Processes
-
/tmp/skid.mips.elf/tmp/skid.mips.elf1⤵
- Reads system routing table
- Reads system network configuration
- System Network Configuration Discovery