4bbe576034f70f82db0d14d476648c40da5d169c59d0de771738dd873ce8f54a

Analysis

max time kernel
143s
max time network
153s
platform
debian-9_armhf
resource
debian9-armhf-20231215-en
resource tags

arch:armhfimage:debian9-armhf-20231215-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
19/12/2023, 22:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

11ffa33d438282be074f3636b55f8dc9
Size

76KB
MD5

11ffa33d438282be074f3636b55f8dc9
SHA1

5f87621a0773781fb0db098d9ae62aee760b15f7
SHA256

4bbe576034f70f82db0d14d476648c40da5d169c59d0de771738dd873ce8f54a
SHA512

914ef81558ce840e6f44f6e8959b5b81301442c50602169fbc7985e480160c3959a2e26809db7076b9473bcbce181bd642033ac60d0613525822aa4d8088a376
SSDEEP

1536:WFZ3LYUA0EkGv9AEcrymLREsrOh2/Jn19p0d9CYHqE/EAyZMf9DKPecmCUiyA:WjYUA0EkGv9AEcrymLRE4Oh2/Jn19p0C

Score

7^/10

Malware Config

Signatures

Changes its process name 1 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	[cpuset]	664	11ffa33d438282be074f3636b55f8dc9

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	11ffa33d438282be074f3636b55f8dc9

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	11ffa33d438282be074f3636b55f8dc9

/tmp/11ffa33d438282be074f3636b55f8dc9
/tmp/11ffa33d438282be074f3636b55f8dc9
1⤵
- Changes its process name
- Reads system routing table
- Reads system network configuration
PID:664

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads