Analysis
-
max time kernel
149s -
max time network
186s -
platform
debian-9_armhf -
resource
debian9-armhf-20240611-en -
resource tags
arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
13-07-2024 11:42
Behavioral task
behavioral1
Sample
b33fa8ea826ead4d17150ec493bae7f4c2f89c30fc16840addc5f225cb05a5d4.elf
Resource
debian9-armhf-20240611-en
debian-9-armhf
2 signatures
150 seconds
General
-
Target
b33fa8ea826ead4d17150ec493bae7f4c2f89c30fc16840addc5f225cb05a5d4.elf
-
Size
152KB
-
MD5
e444ff3dbabc6c9ada4b25ff27392831
-
SHA1
cd8ec0c32e45c6b7551750c6c8c026b96e0b6e5b
-
SHA256
b33fa8ea826ead4d17150ec493bae7f4c2f89c30fc16840addc5f225cb05a5d4
-
SHA512
ce2cffc06e37424b90010df012eeba1e7e7428e75d7be52ab1a2ce2e686682aae13b817cc7bcb46a6fd31607c9d715defcd1b59d6a1d46676e8351b5413c1e18
-
SSDEEP
3072:tdntU2haO5H1XacBoGmh9H5U5hDiGWWmV7f9T637m5wTsL/Qpyn:ntVhaO5H1qEc9Hi5hDiGWWmV7l+7m5wS
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route b33fa8ea826ead4d17150ec493bae7f4c2f89c30fc16840addc5f225cb05a5d4.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route b33fa8ea826ead4d17150ec493bae7f4c2f89c30fc16840addc5f225cb05a5d4.elf