Analysis
-
max time kernel
0s -
max time network
153s -
platform
linux_armhf -
resource
debian9-armhf-en-20211208 -
resource tags
arch:armhfimage:debian9-armhf-en-20211208kernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
20-03-2023 09:06
Behavioral task
behavioral1
Sample
689c3bafc42d8dbdce224fd260d096a7.elf
Resource
debian9-armhf-en-20211208
debian-9-armhf
2 signatures
150 seconds
General
-
Target
689c3bafc42d8dbdce224fd260d096a7.elf
-
Size
146KB
-
MD5
689c3bafc42d8dbdce224fd260d096a7
-
SHA1
ec4105d86535970dfe956de7d226d3c7a7c2e906
-
SHA256
1e1407dc61d3ec7033a114ac3d7f40b31c766f3ea0d4c1ee39067e7c703b0a10
-
SHA512
5e140d13eb46c875700a91795e989ec49828d98494b37c0c368d3c4f66609a5df009b556fec89fb1aa3697847c7a661244c77b440c8bab069f089e9a1489cd79
-
SSDEEP
3072:fuNaNpF4uVN++dkhnxKQennF4M/9OD4bNWkE1kmpwfvRQfZn:mNaNpF4+NChngQennCM/9ekmpwfvafZn
Score
7/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
Processes:
689c3bafc42d8dbdce224fd260d096a7.elfdescription ioc process /proc/net/route /proc/net/route 689c3bafc42d8dbdce224fd260d096a7.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes:
689c3bafc42d8dbdce224fd260d096a7.elfdescription ioc process /proc/net/route /proc/net/route 689c3bafc42d8dbdce224fd260d096a7.elf