Analysis
-
max time kernel
144s -
max time network
155s -
platform
debian-9_armhf -
resource
debian9-armhf-20231215-en -
resource tags
-
submitted
30/12/2023, 00:46
General
-
Target
08ff0628c45ce671973dfc04d518a74a
-
Size
70KB
-
MD5
08ff0628c45ce671973dfc04d518a74a
-
SHA1
9f349c70d2f97ba4b5150bad37888c4cae45b8e4
-
SHA256
891f06b1cd10663967458d724a745271bec36e7041e4f04e3c4913a6f62b2983
-
SHA512
3b4b8af551c010d5fd5ee8dd64e52f9f84aab025d1433ed8cabc7acc406a8ed3d8e59b8b75fa374502125575a3d68aaddc73e1369a89cdef5f41982d76ea4018
-
SSDEEP
1536:3Bkbr1+ZDMJuyz9xsb+PkUNir9hMEO49PUatO0jvRr1SA:3Ba9a+PkUNkLUuZ1V
Score
7/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/08ff0628c45ce671973dfc04d518a74a/tmp/08ff0628c45ce671973dfc04d518a74a1⤵
- Changes its process name
- Reads system routing table
- Reads system network configuration