0cfabc151102f855402a647c1f9d07efd9918caae2c99fb8d5aab3f5c5628d5e

Analysis

max time kernel
136s
max time network
71s
platform
debian-9_armhf
resource
debian9-armhf-20240729-en
resource tags

arch:armhfimage:debian9-armhf-20240729-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
06-10-2024 18:36

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

na.elf
Size

17.2MB
MD5

966354cf5365cd1861147fd454da693b
SHA1

31f16ef7cace2b5320fd2483a73a5a57cf3c5f62
SHA256

0cfabc151102f855402a647c1f9d07efd9918caae2c99fb8d5aab3f5c5628d5e
SHA512

3f4cf5ceed57b35b2e29a082547a395f729789a176d76197b4d03ed78fe0c212cb3999d9520e0e4e08ad9675ca06aed80ee826e6f88841bb82c2b7181205efe7
SSDEEP

98304:0PwwqWZNWGihUp7cmL29DeSzaYuvbsEVIiRdRqn2wKpb+m9cy1EDGpN:0PweiSs8fxwKp+9E

Score

3^/10

discovery

Malware Config

Signatures

Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

discovery

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	na.elf

/tmp/na.elf
/tmp/na.elf
1⤵
- Enumerates kernel/hardware configuration
PID:658

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads