Overview

overview

10

Static

static

10

a229133e40...336fe6

linux_armhf

7

Analysis

  • max time kernel
    14106s
  • max time network
    161s
  • platform
    linux_armhf
  • resource
    debian9-armhf-en-20211208
  • submitted
    20/05/2022, 23:18

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    a229133e404ea924cf132cff161394e7690e60812aea8531d9460aa26e336fe6
  • Size 191KB
  • Sample220520-3aqaqabebm
  • SHA256 a229133e404ea924cf132cff161394e7690e60812aea8531d9460aa26e336fe6
  • MD5 SHA1 SHA512
Score
7/10

Malware Config

Signatures

  • Enumerates active TCP sockets 1 TTPs 1 IoCs

    Gets active TCP sockets from /proc virtual filesystem.

  • Write file to user bin folder 1 TTPs 1 IoCs
  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

  • Reads runtime system information 3 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • ./a229133e404ea924cf132cff161394e7690e60812aea8531d9460aa26e336fe6
    ./a229133e404ea924cf132cff161394e7690e60812aea8531d9460aa26e336fe6
    1⤵
      PID:351

    Network

          MITRE ATT&CK Enterprise v6

          Replay Monitor

          Loading Replay Monitor...

          Downloads