Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    14-11-2024 02:42

General

  • Target

    7cf19e34eb148e9948c1ff732724e844ef06fa7e94b6b6f53356da0911f40a37.elf

  • Size

    102KB

  • MD5

    20e994693975f946d730733026aa9433

  • SHA1

    0c0dc52db40a66a50dec9c94e3abb30cd3ed312c

  • SHA256

    7cf19e34eb148e9948c1ff732724e844ef06fa7e94b6b6f53356da0911f40a37

  • SHA512

    5cbd596ff002a1cbfbbfccb98df8f4834075fa4570cac56cf637a2774ce5189983c7cd187a9e22a7e396fc9a0d201c8cb0c311856f9420b17a60400d292a9847

  • SSDEEP

    3072:pCi6VirwbYRTLL87rutAmpEqQ45vVXY0X:InbcPL87JmpEqQ45vVXY0X

Score
6/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/7cf19e34eb148e9948c1ff732724e844ef06fa7e94b6b6f53356da0911f40a37.elf
    /tmp/7cf19e34eb148e9948c1ff732724e844ef06fa7e94b6b6f53356da0911f40a37.elf
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:633

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads