9279bdefbefcff04d849a1f7df2356067bc35919d2101e3be7c512f52990f21d

Analysis

max time kernel
7544s
max time network
149s
platform
debian-9_armhf
resource
debian9-armhf-20221111-en
resource tags

arch:armhfimage:debian9-armhf-20221111-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
07-02-2023 01:20

Target

7ab59c73193e4d6f44797660fde4d619.elf
Size

146KB
MD5

7ab59c73193e4d6f44797660fde4d619
SHA1

9c1736f706b69ee5c4eb43f4a599675bb12ceadb
SHA256

9279bdefbefcff04d849a1f7df2356067bc35919d2101e3be7c512f52990f21d
SHA512

b54fe0d03426f3619215d2f6aba8feb1ada1f7fa2c6813ed41ae76662976ed99f3b66058f11280ee70658d2110095e5a240b8a4e28e8cf75ce67973a9b1edf93
SSDEEP

3072:bjjMM7NwA7VWxbZaXmpvh7q07YWpxVl0sgURKXmQwfHcQrAN:bPMM7NZ7QZZawp+07YWpxV+XmQwfHzrq

Score

7^/10

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery
T1016

Processes:

7ab59c73193e4d6f44797660fde4d619.elf

description ioc process

/proc/net/route /proc/net/route 7ab59c73193e4d6f44797660fde4d619.elf
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery
T1016

Processes:

7ab59c73193e4d6f44797660fde4d619.elf

description ioc process

/proc/net/route /proc/net/route 7ab59c73193e4d6f44797660fde4d619.elf

description	ioc	process
/proc/net/route	/proc/net/route	7ab59c73193e4d6f44797660fde4d619.elf

description	ioc	process
/proc/net/route	/proc/net/route	7ab59c73193e4d6f44797660fde4d619.elf

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact