48059f158803eb40b15b155cdf06c357fc98bf1b5455e32f43b556d35663aca7

Analysis

max time kernel
18799s
max time network
159s
platform
linux_armhf
resource
debian9-armhf-en-20211208
submitted
14-07-2022 04:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

48059f158803eb40b15b155cdf06c357fc98bf1b5455e32f43b556d35663aca7
Size

159KB
MD5

e092fcffd8d768ba9a5a1973c9ae3946
SHA1

b863854859a1e0cd2842606e8bdba4e3792f1d5d
SHA256

48059f158803eb40b15b155cdf06c357fc98bf1b5455e32f43b556d35663aca7
SHA512

28bc76de8e947d467fc41d561c0fcd86e5054067f2072fd6e157032d3caff1076a7e4f6a4e7bbd4a89d949416332561303dc922d2a09b71072e567503e2166cc

Score

7^/10

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery

T1016

description	ioc	Process
/proc/net/route	/proc/net/route	48059f158803eb40b15b155cdf06c357fc98bf1b5455e32f43b556d35663aca7

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery

T1016

description	ioc	Process
/proc/net/route	/proc/net/route	48059f158803eb40b15b155cdf06c357fc98bf1b5455e32f43b556d35663aca7

./48059f158803eb40b15b155cdf06c357fc98bf1b5455e32f43b556d35663aca7
./48059f158803eb40b15b155cdf06c357fc98bf1b5455e32f43b556d35663aca7
1⤵
- Reads system routing table
- Reads system network configuration
PID:355

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads