Analysis
-
max time kernel
122s -
max time network
123s -
platform
debian-9_armhf -
resource
debian9-armhf-20240611-en -
resource tags
arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
14-11-2024 02:42
Behavioral task
behavioral1
Sample
7cf19e34eb148e9948c1ff732724e844ef06fa7e94b6b6f53356da0911f40a37.elf
Resource
debian9-armhf-20240611-en
debian-9-armhf
2 signatures
150 seconds
General
-
Target
7cf19e34eb148e9948c1ff732724e844ef06fa7e94b6b6f53356da0911f40a37.elf
-
Size
102KB
-
MD5
20e994693975f946d730733026aa9433
-
SHA1
0c0dc52db40a66a50dec9c94e3abb30cd3ed312c
-
SHA256
7cf19e34eb148e9948c1ff732724e844ef06fa7e94b6b6f53356da0911f40a37
-
SHA512
5cbd596ff002a1cbfbbfccb98df8f4834075fa4570cac56cf637a2774ce5189983c7cd187a9e22a7e396fc9a0d201c8cb0c311856f9420b17a60400d292a9847
-
SSDEEP
3072:pCi6VirwbYRTLL87rutAmpEqQ45vVXY0X:InbcPL87JmpEqQ45vVXY0X
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
Processes:
7cf19e34eb148e9948c1ff732724e844ef06fa7e94b6b6f53356da0911f40a37.elfdescription ioc process File opened for reading /proc/net/route 7cf19e34eb148e9948c1ff732724e844ef06fa7e94b6b6f53356da0911f40a37.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes:
7cf19e34eb148e9948c1ff732724e844ef06fa7e94b6b6f53356da0911f40a37.elfdescription ioc process File opened for reading /proc/net/route 7cf19e34eb148e9948c1ff732724e844ef06fa7e94b6b6f53356da0911f40a37.elf