Overview

overview

10

Static

static

10

3bfae100f4...60.elf

debian-9-armhf

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3bfae100f42ccc5b37123998423d1360.elf

  • Size

    152KB

  • Sample

    230304-x3scwsef95

  • MD5

    3bfae100f42ccc5b37123998423d1360

  • SHA1

    9081a39648b544259bdcd621ec6b5ff953b1ad12

  • SHA256

    40abe0b1bc5425e76f868a880bacc5144bff63b6865ff1eaaba570f960f58efb

  • SHA512

    4e9336d077fccd9e32f4038121df0c57bc87f7962b0a33bbde7596603743567497e401499c54d6059c9ed09f51ba97c1fbdbc9e80d0216bf6f9cb54b658c09da

  • SSDEEP

    3072:tdntU2haO5H1XacBoGmh9H5r5hDiGRvEM/9f9T637m5wTsL/Qpyn:ntVhaO5H1qEc9Hh5hDiGRcM/9l+7m5wS

Score
10/10
gafgytdiscovery

Malware Config

Targets

    • Target

      3bfae100f42ccc5b37123998423d1360.elf

    • Size

      152KB

    • MD5

      3bfae100f42ccc5b37123998423d1360

    • SHA1

      9081a39648b544259bdcd621ec6b5ff953b1ad12

    • SHA256

      40abe0b1bc5425e76f868a880bacc5144bff63b6865ff1eaaba570f960f58efb

    • SHA512

      4e9336d077fccd9e32f4038121df0c57bc87f7962b0a33bbde7596603743567497e401499c54d6059c9ed09f51ba97c1fbdbc9e80d0216bf6f9cb54b658c09da

    • SSDEEP

      3072:tdntU2haO5H1XacBoGmh9H5r5hDiGRvEM/9f9T637m5wTsL/Qpyn:ntVhaO5H1qEc9Hh5hDiGRcM/9l+7m5wS

    Score
    7/10
    discovery

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks