0349c284c2b7f00496d51c67ea5d6592d421ec34b48d3244352cef9554d96c3a

Analysis

max time kernel
110s
max time network
114s
platform
debian-9_armhf
resource
debian9-armhf-20240226-en
resource tags

arch:armhfimage:debian9-armhf-20240226-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
19/03/2024, 07:51

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8f9fb8d2c65b6c331c8e4f2c291032fd.elf
Size

204KB
MD5

8f9fb8d2c65b6c331c8e4f2c291032fd
SHA1

fbd5898863ecf2b7f5599eb558689ac6d852a589
SHA256

0349c284c2b7f00496d51c67ea5d6592d421ec34b48d3244352cef9554d96c3a
SHA512

c5b506103933f573f34636bf88db8957957a3421e670c35c73f20f5830552e44a191d735c79b31bb6dc61039303b8e62cef4b0266dd00e921a65f3bd2d178c04
SSDEEP

6144:5ZzyacCwXJ4DbpW0vI5hbL6CBKH/WKcgym0wfB5RyAn:5ZzyacCwXJ4gP5hb7w/ugym0mB5RyAn

Score

6^/10

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	8f9fb8d2c65b6c331c8e4f2c291032fd.elf

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	8f9fb8d2c65b6c331c8e4f2c291032fd.elf

/tmp/8f9fb8d2c65b6c331c8e4f2c291032fd.elf
/tmp/8f9fb8d2c65b6c331c8e4f2c291032fd.elf
1⤵
- Reads system routing table
- Reads system network configuration
PID:654

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads