Overview

overview

10

Static

static

10

a4bd519fe1...d5.elf

debian-12-armhf

6

Analysis

  • max time kernel
    131s
  • max time network
    152s
  • platform
    debian-12_armhf
  • resource
    debian12-armhf-20240418-en
  • resource tags

    arch:armhfimage:debian12-armhf-20240418-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
  • submitted
    08/07/2024, 16:33

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    a4bd519fe1220ed758336a19e1a1ff922d727d3db3eea8c66ab412cf259d5cd5.elf

  • Size

    150KB

  • MD5

    1f929431fbac001c8df984490aaf2e55

  • SHA1

    44f9b13e68c1d9c574eb9ec0c7edac25f0b7ea1a

  • SHA256

    a4bd519fe1220ed758336a19e1a1ff922d727d3db3eea8c66ab412cf259d5cd5

  • SHA512

    4972f737388f463338a9470bb320b29fd580f0b24902081f7e9e09d7810ecfe39e90b002b56a7d83f57a8031da030a84fd42a1615df482868d5ed2ee01d1dd30

  • SSDEEP

    3072:Tdbmn8aAEHqgSkano1DTAe5hWTGZWYxVlxXmpwTsL/QMyn:he8aAEHKkdDTv5hWTGZWYxVldmpwTsLS

Score
6/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/a4bd519fe1220ed758336a19e1a1ff922d727d3db3eea8c66ab412cf259d5cd5.elf
    /tmp/a4bd519fe1220ed758336a19e1a1ff922d727d3db3eea8c66ab412cf259d5cd5.elf
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:702

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads