Overview

overview

7

Static

static

1

90cccd5c44...1f708b

debian-9-armhf

7

Analysis

  • max time kernel
    152s
  • max time network
    156s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20231215-en
  • resource tags

    arch:armhfimage:debian9-armhf-20231215-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    20/12/2023, 07:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    90cccd5c44796f7aed1a9b16b11f708b

  • Size

    114KB

  • MD5

    90cccd5c44796f7aed1a9b16b11f708b

  • SHA1

    45d5e2945317aa74f89391906d5886e5253d241b

  • SHA256

    b3c38c2eda7b53f1962424dc3ad229c2a07a71e3e8d9d57eecabe1a0e257fe3c

  • SHA512

    ec0a83246cac71c352426914b1da06f45cefead6e96c9dd1f5d45d05412a6fda13c893ea66b8724a806da1af82380b09341c74ed2dfcf0c52dbb44ea3c484528

  • SSDEEP

    3072:Z6z1WqLgV4ZQGBcD3i/lMpaLhmVAg/i4zza38jUxglryYlz8+Rr38J2W:Kkza38jUoz8+18Jn

Score
7/10

Malware Config

Signatures

  • Changes its process name 1 IoCs
  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/90cccd5c44796f7aed1a9b16b11f708b
    /tmp/90cccd5c44796f7aed1a9b16b11f708b
    1⤵
    • Changes its process name
    • Reads system routing table
    • Reads system network configuration
    PID:667

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads