Analysis

  • max time kernel
    149s
  • max time network
    186s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    13-07-2024 11:42

General

  • Target

    b33fa8ea826ead4d17150ec493bae7f4c2f89c30fc16840addc5f225cb05a5d4.elf

  • Size

    152KB

  • MD5

    e444ff3dbabc6c9ada4b25ff27392831

  • SHA1

    cd8ec0c32e45c6b7551750c6c8c026b96e0b6e5b

  • SHA256

    b33fa8ea826ead4d17150ec493bae7f4c2f89c30fc16840addc5f225cb05a5d4

  • SHA512

    ce2cffc06e37424b90010df012eeba1e7e7428e75d7be52ab1a2ce2e686682aae13b817cc7bcb46a6fd31607c9d715defcd1b59d6a1d46676e8351b5413c1e18

  • SSDEEP

    3072:tdntU2haO5H1XacBoGmh9H5U5hDiGWWmV7f9T637m5wTsL/Qpyn:ntVhaO5H1qEc9Hi5hDiGWWmV7l+7m5wS

Score
6/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/b33fa8ea826ead4d17150ec493bae7f4c2f89c30fc16840addc5f225cb05a5d4.elf
    /tmp/b33fa8ea826ead4d17150ec493bae7f4c2f89c30fc16840addc5f225cb05a5d4.elf
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:655

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads