Overview

overview

10

Static

static

10

e4d0ac1e6a...a6.elf

debian-9-armhf

6

Analysis

  • max time kernel
    146s
  • max time network
    147s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240226-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240226-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    10/04/2024, 01:49

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    e4d0ac1e6a687c476aca7df34cde03b491f3401d55a2d42409655b5d934be3a6.elf

  • Size

    145KB

  • MD5

    ba86cf49f6c2ddae1ab960deade99da2

  • SHA1

    2c5b86f83cf9fc196e5d2a0886507e708a5cf2c2

  • SHA256

    e4d0ac1e6a687c476aca7df34cde03b491f3401d55a2d42409655b5d934be3a6

  • SHA512

    0710854b986a15cf9e09a7d3d3396ca75c6a23e1cac8584ff5c6513070397fe519ce308742f6699887f47e88816c98dc119e2926d69e1c48e1cac6d86177da71

  • SSDEEP

    3072:6hlLp1zWvkO0PXs/DiW1VrdD5hc8eoadVjkmOMDQ4DtsL6Qse:O7J8/Di2RD5hc8eFkmOMDQ4DtsL6Qse

Score
6/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/e4d0ac1e6a687c476aca7df34cde03b491f3401d55a2d42409655b5d934be3a6.elf
    /tmp/e4d0ac1e6a687c476aca7df34cde03b491f3401d55a2d42409655b5d934be3a6.elf
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:649

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads