5032c13a81abf008b575d620cdbc274fd9cc1fcdb4507dc4db3a7ecbd6c083a8

Analysis

max time kernel
153s
max time network
155s
platform
debian-9_armhf
resource
debian9-armhf-20231215-en
resource tags

arch:armhfimage:debian9-armhf-20231215-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
20/12/2023, 08:11

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9359a7cd1014eaa44ce4fc0ab5663bb6
Size

124KB
MD5

9359a7cd1014eaa44ce4fc0ab5663bb6
SHA1

a60b682b2b105f9d2e7f3dad6c1c60dd27a1ea29
SHA256

5032c13a81abf008b575d620cdbc274fd9cc1fcdb4507dc4db3a7ecbd6c083a8
SHA512

1466dd133995c13db35ecf2a9e869731bfe4343597dba2fb8e80534543ba196ab1dc83b509c9917b5e0395469a087cde067a8ce1a919cb54022102ba5289a866
SSDEEP

3072:afTWBH80vJ0qgsgj9LsXN6Nas6wdQaJZLE94I:ZvJzgj9LsXaas6wdQaJZLE94I

Score

6^/10

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery

T1016

description	ioc
File opened for reading	/proc/net/route

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery

T1016

description	ioc
File opened for reading	/proc/net/route

/tmp/9359a7cd1014eaa44ce4fc0ab5663bb6
/tmp/9359a7cd1014eaa44ce4fc0ab5663bb6
1⤵
PID:677

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads