43a6a9a13117bb7af3e83dad7cbdc543fdbe1923b0807118e5e8be36c0e74a3f

Analysis

max time kernel
142s
max time network
152s
platform
debian-9_armhf
resource
debian9-armhf-20231215-en
resource tags

arch:armhfimage:debian9-armhf-20231215-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
19/12/2023, 23:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

6a7f534c3e0ea7288b3a976e1ecebfc6
Size

61KB
MD5

6a7f534c3e0ea7288b3a976e1ecebfc6
SHA1

a8f830a23a49aff94d623c8006d47e7fd7075eb5
SHA256

43a6a9a13117bb7af3e83dad7cbdc543fdbe1923b0807118e5e8be36c0e74a3f
SHA512

ec648f85d06349eee340c7aa663d2e1163e13f3b1a5fff16846ef3a9136d1fecf0a74f7a9bf4d96b2425a311dd92463a5244b85f852f0e6321a88f35681e5521
SSDEEP

1536:qzr0VUS/wlcRy1fpuV7UMc/mxVSuOEO3v5:q+olQXlumxVtA5

Score

6^/10

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	6a7f534c3e0ea7288b3a976e1ecebfc6

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	6a7f534c3e0ea7288b3a976e1ecebfc6

/tmp/6a7f534c3e0ea7288b3a976e1ecebfc6
/tmp/6a7f534c3e0ea7288b3a976e1ecebfc6
1⤵
- Reads system routing table
- Reads system network configuration
PID:650

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads