Analysis
-
max time kernel
0s -
max time network
149s -
platform
linux_armhf -
resource
debian9-armhf-en-20211208 -
resource tags
arch:armhfimage:debian9-armhf-en-20211208kernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
29-03-2023 13:24
Behavioral task
behavioral1
Sample
61b7c6951e301fcbd859bb66e862e0e8.elf
Resource
debian9-armhf-en-20211208
debian-9-armhf
2 signatures
150 seconds
General
-
Target
61b7c6951e301fcbd859bb66e862e0e8.elf
-
Size
105KB
-
MD5
61b7c6951e301fcbd859bb66e862e0e8
-
SHA1
c48b67bf04600476de77446d1387b255113e9a4e
-
SHA256
ded4ae6ccec0ab7646c20325ebbb82f56d2109ed63cc8af678ba33eb7dcff16e
-
SHA512
1fe7ba4fe7a43a28fdccdd031b729ea8606a7a218930affc5ee1c10b2917600cc6525f5771675a7f51ca96ee816b4c1b8dcd1535edc041a5d21c75ee03c5d76e
-
SSDEEP
3072:OaKh4ut9WuRg0WpGDa5SMXzfbmNQfPfXv4n:OaKh4uFWpGDobmNQfP/v4n
Score
7/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
Processes:
61b7c6951e301fcbd859bb66e862e0e8.elfdescription ioc process /proc/net/route /proc/net/route 61b7c6951e301fcbd859bb66e862e0e8.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes:
61b7c6951e301fcbd859bb66e862e0e8.elfdescription ioc process /proc/net/route /proc/net/route 61b7c6951e301fcbd859bb66e862e0e8.elf