Analysis

  • max time kernel
    140s
  • max time network
    141s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240418-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240418-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    02-07-2024 05:53

General

  • Target

    qkdjdjj22.ppc.elf

  • Size

    167KB

  • MD5

    207eb58423234306edaecb3ec89935d8

  • SHA1

    d64f9f4c92ab1f09851e5a94fa6c0ca518309dea

  • SHA256

    adb038e6094ea569085e9437212ea6a48fe4e7da0096ca0bcdc5e2bffd3c42d6

  • SHA512

    8806b9da8fff69c632ffa6c573b3af84935627de1487cf512c083f2e4539cbcb4ff3610c41d341236db2d11c94dda143ae3773030ef53a34489a1cf686756800

  • SSDEEP

    3072:Bdy8WoZkeDGOvvlIAFZ3U5c0xkuQn3Z5h1X7cKUmSQnNbGUBn:bZv9KBxkuQ3Z5h1X7xUmSQnNbGUBn

Score
6/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/qkdjdjj22.ppc.elf
    /tmp/qkdjdjj22.ppc.elf
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:647

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads