Analysis
-
max time kernel
0s -
max time network
3s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240611-en -
resource tags
-
submitted
25/02/2025, 17:58
General
-
Target
hidakibest.mips.elf
-
Size
141KB
-
MD5
573773f1883a8ca0d5a12389a0ee72a1
-
SHA1
af807af350b1f69c354d1cf262211a70c7974117
-
SHA256
721944255f17371bb2f49dde06ab5ee427bce3d425369172ef251e099822dbab
-
SHA512
c7c78ed8430b41a0d4bafd00cf29361371449ead005b72ebf3fb3542cb14af55d6ad7c7205677601adf99f89666c324ba6260d2e2c81fb9ae5f4f8a499eb6469
-
SSDEEP
3072:sGGNZfCos2pA4FCe5hvikTam0/5ApYADn:hACyK40e5hvi9m0/5ASADn
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
-
System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
Processes
-
/tmp/hidakibest.mips.elf/tmp/hidakibest.mips.elf1⤵
- Reads system routing table
- Reads system network configuration
- System Network Configuration Discovery