94630d6c25b451a55c177fba6714a42349aa5a3aa2eb655a310a7c20a2e136c5

Analysis

max time kernel
140s
max time network
148s
platform
debian-9_armhf
resource
debian9-armhf-20240226-en
resource tags

arch:armhfimage:debian9-armhf-20240226-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
14-03-2024 04:32

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

c7b287ed1c0fb2091e7d59b4c081a0fc
Size

288KB
MD5

c7b287ed1c0fb2091e7d59b4c081a0fc
SHA1

6b4dfe1d915904a37bc80fea8684c3b8ecf4778f
SHA256

94630d6c25b451a55c177fba6714a42349aa5a3aa2eb655a310a7c20a2e136c5
SHA512

53378ca53a22b0439aef02183656db8660dfe633242d390546208c3c665bc6c397b2ba732f42247e97ee94006bfb301dc70d9345d652807789524a7589dd66ea
SSDEEP

6144:A0LL5j8V07RaXjHl3ZnEyHY09WIqjQM/9GmyjXDUD/:pLWV4RaXjHl3ZEuWLp/YmyjXDUD/

Score

7^/10

Malware Config

Signatures

Changes its process name 1 IoCs

description	pid	Process
Changes the process name, possibly in an attempt to hide itself	662	c7b287ed1c0fb2091e7d59b4c081a0fc

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	c7b287ed1c0fb2091e7d59b4c081a0fc

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	c7b287ed1c0fb2091e7d59b4c081a0fc

/tmp/c7b287ed1c0fb2091e7d59b4c081a0fc
/tmp/c7b287ed1c0fb2091e7d59b4c081a0fc
1⤵
- Changes its process name
- Reads system routing table
- Reads system network configuration
PID:662

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads