Analysis
-
max time kernel
1203s -
max time network
159s -
platform
debian-9_armhf -
resource
debian9-armhf-20221111-en -
resource tags
arch:armhfimage:debian9-armhf-20221111-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
25-11-2022 09:51
Behavioral task
behavioral1
Sample
3dd1122bb41177c32fb89f8616a0999707110316ba664e7ce19223436d7d22eb
Resource
debian9-armhf-20221111-en
2 signatures
150 seconds
General
-
Target
3dd1122bb41177c32fb89f8616a0999707110316ba664e7ce19223436d7d22eb
-
Size
109KB
-
MD5
1473a537d4abaa5532c676d0dbfd3f63
-
SHA1
4429117617931d487bb93b5fec1e74da20434713
-
SHA256
3dd1122bb41177c32fb89f8616a0999707110316ba664e7ce19223436d7d22eb
-
SHA512
c3011bfd02d246fe3b092b151f19e5d5e0a3412884e7416b65d0150a5788e1bbbe5d98837c1070522b2359d3caab5f2d4c4019d2f6aa342612a79f567f05e7a4
-
SSDEEP
3072:BOaMSWo9KW8PuHUdY2M7ccyCGKVhmcQOYMGXzYd:BOaQo9p2MQcyChmcQOYM4zYd
Score
7/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
Processes:
3dd1122bb41177c32fb89f8616a0999707110316ba664e7ce19223436d7d22ebdescription ioc process /proc/net/route /proc/net/route 3dd1122bb41177c32fb89f8616a0999707110316ba664e7ce19223436d7d22eb -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes:
3dd1122bb41177c32fb89f8616a0999707110316ba664e7ce19223436d7d22ebdescription ioc process /proc/net/route /proc/net/route 3dd1122bb41177c32fb89f8616a0999707110316ba664e7ce19223436d7d22eb
Processes
Network
MITRE ATT&CK Matrix ATT&CK v6
Replay Monitor
00:00
00:00