Analysis
-
max time kernel
141s -
max time network
153s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240611-en -
resource tags
-
submitted
28/02/2025, 19:22
General
-
Target
hidakibest.mips.elf
-
Size
141KB
-
MD5
5abd643f727d4908634fc6a26f8acb85
-
SHA1
56c32d46d0df70bd117b917a85fd996592bbbfcd
-
SHA256
66d75d65130435af565c03f921cecc2a647545c7577eedd92c314023fbdb1821
-
SHA512
a54baa02e678b847ee8db7fcaef59b1538942e4cacca1bb304b01e3c458b31a686dbf8558a70e3ffcc8135f0e6158707cfa430fc6c8798f5a6a5cbf065909a2e
-
SSDEEP
3072:sGGNZfCos2pA4FCS5hvikTam0/5ApYADn:hACyK40S5hvi9m0/5ASADn
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
-
System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
Processes
-
/tmp/hidakibest.mips.elf/tmp/hidakibest.mips.elf1⤵
- Reads system routing table
- Reads system network configuration
- System Network Configuration Discovery