Analysis
-
max time kernel
140s -
max time network
150s -
platform
debian-9_armhf -
resource
debian9-armhf-20240729-en -
resource tags
-
submitted
19-10-2024 02:11
General
-
Target
a78e758be4d3ae7e1d6b22d828d69a2b01f934747169f8b5444c6992541c8526.elf
-
Size
167KB
-
MD5
bb4219d289084083cda5460b79de32e6
-
SHA1
f3c7dac744c6f440d100d7343c87fd822f8b63ec
-
SHA256
a78e758be4d3ae7e1d6b22d828d69a2b01f934747169f8b5444c6992541c8526
-
SHA512
99a87912f3f4cdd68e24c30c99ff850e204c7253ec53cb196e4618885ebce604b61cf88fc155a9e00ea330e52f437dd124c31fc72922520a114e7294825fbcf7
-
SSDEEP
3072:pc96PmY61b0QM+v0yKpFOB2zDk5WiQeaE5htu7ecmHSUmSQnNbGUBn:aZHvBi05WiQxE5htu7oyUmSQnNbGUBn
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/a78e758be4d3ae7e1d6b22d828d69a2b01f934747169f8b5444c6992541c8526.elf/tmp/a78e758be4d3ae7e1d6b22d828d69a2b01f934747169f8b5444c6992541c8526.elf1⤵
- Reads system routing table
- Reads system network configuration