Analysis
-
max time kernel
17198s -
max time network
160s -
platform
linux_armhf -
resource
debian9-armhf-en-20211208 -
submitted
25-06-2022 17:20
Static task
static1
Behavioral task
behavioral1
Sample
bf2ce0cffa67d68daedfa5afe8f902b8c030a6678e8df0c3ccc50884bfae6361
Resource
debian9-armhf-en-20211208
linux_armhf
0 signatures
0 seconds
General
-
Target
bf2ce0cffa67d68daedfa5afe8f902b8c030a6678e8df0c3ccc50884bfae6361
-
Size
197KB
-
MD5
797ffa37e8c61ee5a4da8ee01eda76ff
-
SHA1
184105fbc7319d9433fdfcfc69a41540335f0acb
-
SHA256
bf2ce0cffa67d68daedfa5afe8f902b8c030a6678e8df0c3ccc50884bfae6361
-
SHA512
d205e38a23d97482fcadb49fb45a82084f55e0d9be936760772b89867196dca0e0b1b00044ba6415310ce40d699e0c96ac9ecdda852937fb3721de3a15a02e4b
Score
7/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
Processes:
bf2ce0cffa67d68daedfa5afe8f902b8c030a6678e8df0c3ccc50884bfae6361description ioc process /proc/net/route /proc/net/route bf2ce0cffa67d68daedfa5afe8f902b8c030a6678e8df0c3ccc50884bfae6361 -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes:
bf2ce0cffa67d68daedfa5afe8f902b8c030a6678e8df0c3ccc50884bfae6361description ioc process /proc/net/route /proc/net/route bf2ce0cffa67d68daedfa5afe8f902b8c030a6678e8df0c3ccc50884bfae6361