Analysis
-
max time kernel
140s -
max time network
152s -
platform
debian-9_armhf -
resource
debian9-armhf-20240418-en -
resource tags
arch:armhfimage:debian9-armhf-20240418-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
12-11-2024 02:07
Behavioral task
behavioral1
Sample
1d7c7d8de74b1998b6297c00e70132eb7b0fe09247cae178e12bbca7a5740511.elf
Resource
debian9-armhf-20240418-en
General
-
Target
1d7c7d8de74b1998b6297c00e70132eb7b0fe09247cae178e12bbca7a5740511.elf
-
Size
156KB
-
MD5
496fc5c6e80dbcb22cff504a29ce5d82
-
SHA1
96449aa12e29245e92ab07454d513bda986ecc84
-
SHA256
1d7c7d8de74b1998b6297c00e70132eb7b0fe09247cae178e12bbca7a5740511
-
SHA512
f9bb8f3085881969bea6aa01bdb28633f6d41697462816cd92b3b51d51e6221a12f7a938a8d3e09d163f6af2f486f3ab8f7a9138b04fb04bc07c155c92a5f365
-
SSDEEP
3072:T1g2/eINNlzx2kkQCMOaQcvBpYnyLRM/9q3tmFwfBxKQodn:hg2hNNlzIkk/MOa/fYnydM/9MmFwfBxE
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
Processes:
1d7c7d8de74b1998b6297c00e70132eb7b0fe09247cae178e12bbca7a5740511.elfdescription ioc process File opened for reading /proc/net/route 1d7c7d8de74b1998b6297c00e70132eb7b0fe09247cae178e12bbca7a5740511.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes:
1d7c7d8de74b1998b6297c00e70132eb7b0fe09247cae178e12bbca7a5740511.elfdescription ioc process File opened for reading /proc/net/route 1d7c7d8de74b1998b6297c00e70132eb7b0fe09247cae178e12bbca7a5740511.elf