5b1136585bbad140e0464835a1b3422fa62d5884b4caec5fb6884418fd3eefe7

Analysis

max time kernel
149s
max time network
152s
platform
debian-9_mips
resource
debian9-mipsbe-20240611-en
resource tags

arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
10/04/2025, 00:14

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

m-i.p-s.ISIS.elf
Size

131KB
MD5

b4849d9f31cbd7c0d2276e262443e323
SHA1

4c2815b01ec573b0b4e07bdc37eea79ada535067
SHA256

5b1136585bbad140e0464835a1b3422fa62d5884b4caec5fb6884418fd3eefe7
SHA512

0ca41d29188ee53a139c1117054af36f0fc970c02e2dceb94d1784371b57699c439409bd8c72e76d08b9f754177714a9a67e8de8f39018eb61e1de1a73ccfda9
SSDEEP

3072:jGTyrDxJWwAfr9f3yJddxUEJmTDmjOrWcpu3NJFARtRVJhGvaZqhZYiDhB/ZZ9BR:C+nZSZ9nJeUmkASFxBKvXZX

Score

6^/10

discovery

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	m-i.p-s.ISIS.elf

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	m-i.p-s.ISIS.elf

/tmp/m-i.p-s.ISIS.elf
/tmp/m-i.p-s.ISIS.elf
1⤵
- Reads system routing table
- Reads system network configuration
PID:695

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads