caeeb89d86c41917e89af2a3ba5ffac7a5c758041d47dfa22e8079f52438c7e5

Analysis

max time kernel
151s
max time network
156s
platform
debian-12_mipsel
resource
debian12-mipsel-20240221-en
resource tags

arch:mipselimage:debian12-mipsel-20240221-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
submitted
10/04/2025, 02:05

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

m-p.s-l.ISIS.elf
Size

131KB
MD5

4106f65fb6664f78141d7d52dee758b7
SHA1

eb77c4b5beb7c723c88af84749506c39c6be276a
SHA256

caeeb89d86c41917e89af2a3ba5ffac7a5c758041d47dfa22e8079f52438c7e5
SHA512

0b8ae812c10e232fbbddcf4c53da9ee00caea322c29c951ea24d91dc01f5c88ad742c4a86947df29d483f8ac1a8dac1a45c02ac100b8ded9368911598b1247a8
SSDEEP

1536:o2beTpNb9DERkLMurNpZ3efJp68E1wYqEvd00PUmkVmSFxBC7vXZX:o2cNJLlrvJF17vdlPUmkASFxBKvXZX

Score

6^/10

discovery

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	m-p.s-l.ISIS.elf

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	m-p.s-l.ISIS.elf

/tmp/m-p.s-l.ISIS.elf
/tmp/m-p.s-l.ISIS.elf
1⤵
- Reads system routing table
- Reads system network configuration
PID:748

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads