Analysis
-
max time kernel
150s -
max time network
154s -
platform
debian-9_armhf -
resource
debian9-armhf-20231215-en -
resource tags
-
submitted
19-12-2023 23:21
General
-
Target
5c8f2b05272a131055fc6384ffdddc52
-
Size
152KB
-
MD5
5c8f2b05272a131055fc6384ffdddc52
-
SHA1
616d59fab5cfaa26aa981e58c4b1559aeeff0a8b
-
SHA256
903a01e77c022de49a4b0caded85093d2738df1825c19decaedcedc8cd000829
-
SHA512
38b525c21235391d0b13e589d273e8b239c2f089155af3967c4ef6542349d126966fbff8c6f6ced77fcc8ca52b9e4bd648f7ac9a8edd02805156a08a415bafd7
-
SSDEEP
3072:yXTV17g6Cy++t/8teNSZJYbla+YaJJYD1yHpiT6rkPE9GmyOEQrCUEGT:2TBSZGbla+Ya9pimkPwGmyOEQrCUEGT
Score
7/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/5c8f2b05272a131055fc6384ffdddc52/tmp/5c8f2b05272a131055fc6384ffdddc521⤵
- Changes its process name
- Reads system routing table
- Reads system network configuration