d837d2a8c7b5c6f5d291ad11b608656a894b4099cb4f4f5beca62342fe078903

Analysis

max time kernel
11035s
max time network
151s
platform
debian-9_armhf
resource
debian9-armhf-20221111-en
resource tags

arch:armhfimage:debian9-armhf-20221111-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
19-03-2023 10:56

Target

0203f2f2c90badad38e2062c528c59b2.elf
Size

152KB
MD5

0203f2f2c90badad38e2062c528c59b2
SHA1

4577ffd60b163a4ad1abb3e3bb5da125491476f4
SHA256

d837d2a8c7b5c6f5d291ad11b608656a894b4099cb4f4f5beca62342fe078903
SHA512

98711fe396173bcc402ae75d17db199d6dd99fb838618504429c4827741d4a55824571fcba2ae941f71c18e9595fb2d360e7b4e20f902ac52a1186c9bc4273c3
SSDEEP

3072:adHtg2Nav5HqvGgBMKmh9H5S5hTKGRvEM/9RuDK37m5wTsL/Qpyn:KNZNav5HquA09HE5hTKGRcM/9Ei7m5wS

Score

7^/10

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery
T1016

Processes:

0203f2f2c90badad38e2062c528c59b2.elf

description ioc process

/proc/net/route /proc/net/route 0203f2f2c90badad38e2062c528c59b2.elf
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery
T1016

Processes:

0203f2f2c90badad38e2062c528c59b2.elf

description ioc process

/proc/net/route /proc/net/route 0203f2f2c90badad38e2062c528c59b2.elf

description	ioc	process
/proc/net/route	/proc/net/route	0203f2f2c90badad38e2062c528c59b2.elf

description	ioc	process
/proc/net/route	/proc/net/route	0203f2f2c90badad38e2062c528c59b2.elf

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact