3dd1122bb41177c32fb89f8616a0999707110316ba664e7ce19223436d7d22eb

Analysis

max time kernel
1203s
max time network
159s
platform
debian-9_armhf
resource
debian9-armhf-20221111-en
resource tags

arch:armhfimage:debian9-armhf-20221111-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
25-11-2022 09:51

Target

3dd1122bb41177c32fb89f8616a0999707110316ba664e7ce19223436d7d22eb
Size

109KB
MD5

1473a537d4abaa5532c676d0dbfd3f63
SHA1

4429117617931d487bb93b5fec1e74da20434713
SHA256

3dd1122bb41177c32fb89f8616a0999707110316ba664e7ce19223436d7d22eb
SHA512

c3011bfd02d246fe3b092b151f19e5d5e0a3412884e7416b65d0150a5788e1bbbe5d98837c1070522b2359d3caab5f2d4c4019d2f6aa342612a79f567f05e7a4
SSDEEP

3072:BOaMSWo9KW8PuHUdY2M7ccyCGKVhmcQOYMGXzYd:BOaQo9p2MQcyChmcQOYM4zYd

Score

7^/10

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery
T1016

Processes:

3dd1122bb41177c32fb89f8616a0999707110316ba664e7ce19223436d7d22eb

description ioc process

/proc/net/route /proc/net/route 3dd1122bb41177c32fb89f8616a0999707110316ba664e7ce19223436d7d22eb
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery
T1016

Processes:

3dd1122bb41177c32fb89f8616a0999707110316ba664e7ce19223436d7d22eb

description ioc process

/proc/net/route /proc/net/route 3dd1122bb41177c32fb89f8616a0999707110316ba664e7ce19223436d7d22eb

description	ioc	process
/proc/net/route	/proc/net/route	3dd1122bb41177c32fb89f8616a0999707110316ba664e7ce19223436d7d22eb

description	ioc	process
/proc/net/route	/proc/net/route	3dd1122bb41177c32fb89f8616a0999707110316ba664e7ce19223436d7d22eb

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact