Analysis
-
max time kernel
149s -
max time network
144s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240418-en -
resource tags
-
submitted
25/02/2025, 06:43
General
-
Target
skid.mips.elf
-
Size
112KB
-
MD5
1c7da84f7aada3cb5b911be38c9a0832
-
SHA1
d00854b6f6210f7880ebaeb60487a24ed8b12132
-
SHA256
6fc980aa734c027d6e537ee2f58cb95706862c323233e95eb6d2495a17a9c8bf
-
SHA512
cdedee7593e0313e4fdc4f82eae14ef788195ef9154cad0326f8b5916c2c9898df8a1397a1151636a56f1bbe122dcfe5264b5a57f4bfde4a34d008c7c99a7c27
-
SSDEEP
3072:0VW0fIHznlZe5h50qBkxmkizF9GhsRiAe:0APT3e5h50ZxmkizF9GhsRiAe
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
-
System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
Processes
-
/tmp/skid.mips.elf/tmp/skid.mips.elf1⤵
- Reads system routing table
- Reads system network configuration
- System Network Configuration Discovery