Overview

overview

7

Static

static

7

064dd41059...49.elf

debian-9-mipsel

6

Analysis

  • max time kernel
    141s
  • max time network
    149s
  • platform
    debian-9_mipsel
  • resource
    debian9-mipsel-20231221-en
  • resource tags

    arch:mipselimage:debian9-mipsel-20231221-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    12/02/2024, 02:08

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    064dd410597147ad075459df1bd0ec0023384041995ef0ff16a16dcbc6986749.elf

  • Size

    56KB

  • MD5

    c29b4890fb98ef89e4179a3d124922dc

  • SHA1

    a474fb850870b056573fed027c48211031725459

  • SHA256

    064dd410597147ad075459df1bd0ec0023384041995ef0ff16a16dcbc6986749

  • SHA512

    2fecc9545b734ba4ade475351d1f7ff5d1d237abc166114ae20928790698d4b86a8ab7197331ceb1c94c85ef26062dccb8b1cc53bbb1e7cecb41e5ba64451335

  • SSDEEP

    1536:lGXhFaMBkwezxLNEB5YUxgY9zJtalB+nzHB:0FaMBtILiBh18al

Score
6/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/064dd410597147ad075459df1bd0ec0023384041995ef0ff16a16dcbc6986749.elf
    /tmp/064dd410597147ad075459df1bd0ec0023384041995ef0ff16a16dcbc6986749.elf
    1⤵
    • Reads system routing table
    • Reads system network configuration
    • Writes file to tmp directory
    PID:705

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /tmp/Infected.log
          Filesize

          107B

          MD5

          a70a5dde6f79eaea4e71c88b6a2ccc38

          SHA1

          92c0273c4be5d4b7bdbdd500de5a64e5e05652b2

          SHA256

          d087a5a10a09b589993d8cc44a24ef22db26ffd0feeeb3f29b15af008c292af8

          SHA512

          aaa7d00faa34a87292f23a16dae8a7a4b5a40c8e375a579f1286427819c2a04e1c6f970dbc0f2433e6c03f59a2ece0f28ba1e8fc526bc4afe77f176f61876c52

          Download Submit