Overview

overview

10

Static

static

10

3dd1122bb4...7d22eb

debian-9-armhf

7

Analysis

  • max time kernel
    1203s
  • max time network
    159s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20221111-en
  • resource tags

    arch:armhfimage:debian9-armhf-20221111-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    25-11-2022 09:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3dd1122bb41177c32fb89f8616a0999707110316ba664e7ce19223436d7d22eb

  • Size

    109KB

  • MD5

    1473a537d4abaa5532c676d0dbfd3f63

  • SHA1

    4429117617931d487bb93b5fec1e74da20434713

  • SHA256

    3dd1122bb41177c32fb89f8616a0999707110316ba664e7ce19223436d7d22eb

  • SHA512

    c3011bfd02d246fe3b092b151f19e5d5e0a3412884e7416b65d0150a5788e1bbbe5d98837c1070522b2359d3caab5f2d4c4019d2f6aa342612a79f567f05e7a4

  • SSDEEP

    3072:BOaMSWo9KW8PuHUdY2M7ccyCGKVhmcQOYMGXzYd:BOaQo9p2MQcyChmcQOYM4zYd

Score
7/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/3dd1122bb41177c32fb89f8616a0999707110316ba664e7ce19223436d7d22eb
    /tmp/3dd1122bb41177c32fb89f8616a0999707110316ba664e7ce19223436d7d22eb
    • Reads system routing table
    • Reads system network configuration
    PID:421

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

2
T1016

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Replay Monitor

00:00 00:00

Downloads