Analysis
-
max time kernel
150s -
max time network
155s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240611-en -
resource tags
-
submitted
25/02/2025, 18:16
General
-
Target
hidakibest.mips.elf
-
Size
141KB
-
MD5
faf748a382c235db1eeb23891093774c
-
SHA1
6a12a2ef715f574aba092c87f16b836d49e79492
-
SHA256
b7b3ad4fa320cbf7a44d5e7bffde713b87bb37555e1dc7512d8b94a0f1273580
-
SHA512
bf53b643f7e6414d2f7bd1d0ae2a6b7c4cc520f69a8c122ff4c1a25ca3f436fd0c8baa3e846cd23451eb80c2b9c1c28ceb22114255112138a55d7c2110bcb790
-
SSDEEP
3072:sGGNZfCos2pA4FCk5hvikTam0/5ApYADn:hACyK40k5hvi9m0/5ASADn
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
-
System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
Processes
-
/tmp/hidakibest.mips.elf/tmp/hidakibest.mips.elf1⤵
- Reads system routing table
- Reads system network configuration
- System Network Configuration Discovery