Analysis
-
max time kernel
149s -
max time network
188s -
platform
debian-9_armhf -
resource
debian9-armhf-20240611-en -
resource tags
-
submitted
14-11-2024 02:12
General
-
Target
228656f2137b314bba6e8dc4b0ed34790022b4c4470a3be2b0bd4fe9a3ec7b56.elf
-
Size
161KB
-
MD5
a3f23ff0b67c0cb7962b77070cf30dfd
-
SHA1
ba2d8bbfc08f4b618f488be440e173ea7119a84b
-
SHA256
228656f2137b314bba6e8dc4b0ed34790022b4c4470a3be2b0bd4fe9a3ec7b56
-
SHA512
f745db5bb2501462b8788a2000215f76460a4e3cc7fc144398eaaa64b37629a5fe0fb86aab6f7a3003c2d7849bb6165acf298593bb3a587c37f386c402ee0052
-
SSDEEP
3072:AdkbJBagqhj7yLWcugMcrSlLnpQEM/9q4MCmpwfFRQfVE:MkNBagqhjWLycrQLnpzM/95MCmpwfFau
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/228656f2137b314bba6e8dc4b0ed34790022b4c4470a3be2b0bd4fe9a3ec7b56.elf/tmp/228656f2137b314bba6e8dc4b0ed34790022b4c4470a3be2b0bd4fe9a3ec7b56.elf1⤵
- Reads system routing table
- Reads system network configuration