Analysis
-
max time kernel
140s -
max time network
152s -
platform
debian-9_armhf -
resource
debian9-armhf-20240611-en -
resource tags
-
submitted
12-11-2024 02:50
General
-
Target
b3df6ef2185df65483d2f9ae7ef174eaa4e1cc8256420358db036547d300d324.elf
-
Size
98KB
-
MD5
6cf5af2d320ebe051084d3a832a34897
-
SHA1
0f5681f6363b7cd9f605262ee495de8c6a98ec66
-
SHA256
b3df6ef2185df65483d2f9ae7ef174eaa4e1cc8256420358db036547d300d324
-
SHA512
c074d737e4c771b1558d63da9ef3f09de2830072f556b335a679bc7bf52e25d74c7719f54b49d08cb2e6053b41a6aa565d2d21658a05f6a16392269628d082da
-
SSDEEP
3072:VSx+i6mqaObhNTnPNKV+qKmZuqQ4DPwXXtse:y6mRObnTnP7qKmZuqQ4DPwXXtse
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/b3df6ef2185df65483d2f9ae7ef174eaa4e1cc8256420358db036547d300d324.elf/tmp/b3df6ef2185df65483d2f9ae7ef174eaa4e1cc8256420358db036547d300d324.elf1⤵
- Reads system routing table
- Reads system network configuration