Overview

overview

7

Static

static

1

15b553cb03...1e031c

debian-9-armhf

7

Analysis

  • max time kernel
    142s
  • max time network
    152s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20231215-en
  • resource tags

    arch:armhfimage:debian9-armhf-20231215-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    19/12/2023, 22:35

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    15b553cb031090e3a28f221c1e1e031c

  • Size

    114KB

  • MD5

    15b553cb031090e3a28f221c1e1e031c

  • SHA1

    776cc0e59966e7179191ceac6382c8da32654021

  • SHA256

    8ba5e541cb94b6e0f0ee8cddb57ea9b14355f6ef0f52e95850e137f0433e2687

  • SHA512

    d4c476571035caecc82518e4f83f550facb97f3cb5a7b1445eea8e6c55291b46042de40e7e2d2846b990bf0b527843adf9834effdde2531578f882f761321be7

  • SSDEEP

    3072:I6z1WqLgV4ZQGBcD3i/lMpaLhmVAg/iLezaOMzUxglryYlwU+hyn8J2W:j6zaOMzUowU+e8Jn

Score
7/10

Malware Config

Signatures

  • Changes its process name 1 IoCs
  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/15b553cb031090e3a28f221c1e1e031c
    /tmp/15b553cb031090e3a28f221c1e1e031c
    1⤵
    • Changes its process name
    • Reads system routing table
    • Reads system network configuration
    PID:657

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads