a10f2b5be8e2504b4ebdbb7899be7f6b79d79f29c60d5a5fac05a8ab4ffbc803

Analysis

max time kernel
37425s
max time network
149s
platform
linux_armhf
resource
debian9-armhf-en-20211208
resource tags

arch:armhfimage:debian9-armhf-en-20211208kernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
14-02-2023 20:46

Target

3d0c599ecb7a602b2adfa475123ff718.elf
Size

238KB
MD5

3d0c599ecb7a602b2adfa475123ff718
SHA1

db66fcd4d1ddc1c7250223aeae92000cc68f659d
SHA256

a10f2b5be8e2504b4ebdbb7899be7f6b79d79f29c60d5a5fac05a8ab4ffbc803
SHA512

6921782e1125279503f54dc4eca4b9e90223c34495980b638e25a5fe2b477ca99ed43af3935eba7fa08e4b007f4d50a42d9eb3574a7f7e7fb8c626c9ab299792
SSDEEP

3072:ixMCfCY60I8jUUaxj2WB+cCeE/X/oIeijlkvmzQOJjpZfa:crCY60uUadZE/nSvmzQOJdZfa

Score

7^/10

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery
T1016

Processes:

3d0c599ecb7a602b2adfa475123ff718.elf

description ioc process

/proc/net/route /proc/net/route 3d0c599ecb7a602b2adfa475123ff718.elf
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery
T1016

Processes:

3d0c599ecb7a602b2adfa475123ff718.elf

description ioc process

/proc/net/route /proc/net/route 3d0c599ecb7a602b2adfa475123ff718.elf

description	ioc	process
/proc/net/route	/proc/net/route	3d0c599ecb7a602b2adfa475123ff718.elf

description	ioc	process
/proc/net/route	/proc/net/route	3d0c599ecb7a602b2adfa475123ff718.elf

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact