Analysis
-
max time kernel
140s -
max time network
179s -
platform
debian-12_armhf -
resource
debian12-armhf-20240221-en -
resource tags
-
submitted
15/10/2024, 01:33
General
-
Target
895f51d9af7134ed1b29ba7e9b2a2a96df54f0f140fa1533733e8c673f1a42f9.elf
-
Size
204KB
-
MD5
a1f1f29d081acb7dc39c8368e4c5e57f
-
SHA1
2a6e2a5ef793ded2dfef30ba8feedae6f364458e
-
SHA256
895f51d9af7134ed1b29ba7e9b2a2a96df54f0f140fa1533733e8c673f1a42f9
-
SHA512
4140ade619fe1050c6cc04b7eab55ea1e33334e539f17a188fc4fa7ecfb9806ced28bbb2b31c2e226d03f183bbd0d0a9e6a9ecbdb72f29a54c32853454234643
-
SSDEEP
6144:FZzyacCwXJ4DbpW0vt5hbL6K2axVOcgym0wfB5RyAn:FZzyacCwXJ4gS5hbMylgym0mB5RyAn
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/895f51d9af7134ed1b29ba7e9b2a2a96df54f0f140fa1533733e8c673f1a42f9.elf/tmp/895f51d9af7134ed1b29ba7e9b2a2a96df54f0f140fa1533733e8c673f1a42f9.elf1⤵
- Reads system routing table
- Reads system network configuration