Analysis
-
max time kernel
140s -
max time network
150s -
platform
debian-9_armhf -
resource
debian9-armhf-20240729-en -
resource tags
arch:armhfimage:debian9-armhf-20240729-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
19-10-2024 02:11
Behavioral task
behavioral1
Sample
a78e758be4d3ae7e1d6b22d828d69a2b01f934747169f8b5444c6992541c8526.elf
Resource
debian9-armhf-20240729-en
General
-
Target
a78e758be4d3ae7e1d6b22d828d69a2b01f934747169f8b5444c6992541c8526.elf
-
Size
167KB
-
MD5
bb4219d289084083cda5460b79de32e6
-
SHA1
f3c7dac744c6f440d100d7343c87fd822f8b63ec
-
SHA256
a78e758be4d3ae7e1d6b22d828d69a2b01f934747169f8b5444c6992541c8526
-
SHA512
99a87912f3f4cdd68e24c30c99ff850e204c7253ec53cb196e4618885ebce604b61cf88fc155a9e00ea330e52f437dd124c31fc72922520a114e7294825fbcf7
-
SSDEEP
3072:pc96PmY61b0QM+v0yKpFOB2zDk5WiQeaE5htu7ecmHSUmSQnNbGUBn:aZHvBi05WiQxE5htu7oyUmSQnNbGUBn
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
Processes:
a78e758be4d3ae7e1d6b22d828d69a2b01f934747169f8b5444c6992541c8526.elfdescription ioc process File opened for reading /proc/net/route a78e758be4d3ae7e1d6b22d828d69a2b01f934747169f8b5444c6992541c8526.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes:
a78e758be4d3ae7e1d6b22d828d69a2b01f934747169f8b5444c6992541c8526.elfdescription ioc process File opened for reading /proc/net/route a78e758be4d3ae7e1d6b22d828d69a2b01f934747169f8b5444c6992541c8526.elf