Analysis
-
max time kernel
5s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240611-en -
resource tags
-
submitted
07/03/2025, 07:05
General
-
Target
c64ff23936be1fa84db30dbfc514242b907e5b7939493fe0d2ed70e6eb5f6191.elf
-
Size
89KB
-
MD5
e4f8a7b553331548825d7084541bbd27
-
SHA1
7d5ea091f711dcc86c2e5967a09525e73a45039f
-
SHA256
c64ff23936be1fa84db30dbfc514242b907e5b7939493fe0d2ed70e6eb5f6191
-
SHA512
f3f3d7ac736cd9550e59a3578307b955c5767bdf7b84c0b8797900c709e92ce16dc7c2fc89666ddb21165ab03baa70086a663e18047faeb65ed45f6ba1a219ea
-
SSDEEP
1536:e85/5VgFU4e3xkkd90zrC8fHyZSP1QLLneeAa7410Wt5:T/IFBsx8lHyZSP1QLya4vv
Score
6/10
Malware Config
Signatures
-
Enumerates active TCP sockets 1 TTPs 1 IoCs
Gets active TCP sockets from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/c64ff23936be1fa84db30dbfc514242b907e5b7939493fe0d2ed70e6eb5f6191.elf/tmp/c64ff23936be1fa84db30dbfc514242b907e5b7939493fe0d2ed70e6eb5f6191.elf1⤵
- Enumerates active TCP sockets
- Reads system network configuration