54476f3c59642eec25e8c1d1029ba44a5cb266432bd77d8213d5a2cc87432f2d

Analysis

max time kernel
143s
max time network
154s
platform
debian-9_armhf
resource
debian9-armhf-20231215-en
resource tags

arch:armhfimage:debian9-armhf-20231215-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
19/12/2023, 23:28

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

688a985d75e80909f96e7724b5eee121
Size

108KB
MD5

688a985d75e80909f96e7724b5eee121
SHA1

a2eb98c92eb73b0214d9542a1bf3f242c0634db5
SHA256

54476f3c59642eec25e8c1d1029ba44a5cb266432bd77d8213d5a2cc87432f2d
SHA512

08d5e0667d37aa9f289b571c0c3cf7c4bd75791629c94643d6490d6a8304267f59b61c5bceb353d5f2d97fbd3a4299fc16acf309d6fbce754d9c1ed07a5e148f
SSDEEP

3072:b6an17WtsWhdgYJw0D6mbPbmTQOWsXAOn:Wan17WPJw0D6ibmTQOWCAOn

Score

6^/10

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	688a985d75e80909f96e7724b5eee121

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	688a985d75e80909f96e7724b5eee121

/tmp/688a985d75e80909f96e7724b5eee121
/tmp/688a985d75e80909f96e7724b5eee121
1⤵
- Reads system routing table
- Reads system network configuration
PID:683

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads