8a1f0ae48659411d2334cc27f08caa61a83f3a87bb14e46c6054c403315202a9

Analysis

max time kernel
142s
max time network
152s
platform
debian-9_armhf
resource
debian9-armhf-20231215-en
resource tags

arch:armhfimage:debian9-armhf-20231215-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
19/12/2023, 23:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

665b9bceaa50ffd563094969f8e84133
Size

109KB
MD5

665b9bceaa50ffd563094969f8e84133
SHA1

1d6bdc244c4402300f40c9cc5b3b9ae3ce4ad2a5
SHA256

8a1f0ae48659411d2334cc27f08caa61a83f3a87bb14e46c6054c403315202a9
SHA512

415eaf246b4860cdeb2ef5be9b037b31ec41b1d1e61544df2d4058ddece5cfdabe53ed37b725a82e3ca94505ea9c70b0fc86535a8be3682af4efc6d1deeda157
SSDEEP

3072:doXi2BQz0FhWuAoS0YlQCOv5wiL7uvU25cmZQnK2XPLN:9wPS0jJv+iL7uvU25cmZQnKIPLN

Score

6^/10

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	665b9bceaa50ffd563094969f8e84133

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	665b9bceaa50ffd563094969f8e84133

/tmp/665b9bceaa50ffd563094969f8e84133
/tmp/665b9bceaa50ffd563094969f8e84133
1⤵
- Reads system routing table
- Reads system network configuration
PID:657

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads