Analysis
-
max time kernel
150s -
max time network
152s -
platform
debian-9_armhf -
resource
debian9-armhf-20240729-en -
resource tags
-
submitted
14-11-2024 02:26
General
-
Target
57166146af2e8e463cb70ff74b787473600941427569db083a96655728063541.elf
-
Size
161KB
-
MD5
aa5281a4f008652bd5488dcea862e933
-
SHA1
5786bb24333eb832f81295abc2dab1486e412a40
-
SHA256
57166146af2e8e463cb70ff74b787473600941427569db083a96655728063541
-
SHA512
4081a4b1772687141d4caa6340b85808b1f76b46cbc6e1c1d027dd0b5f480eb737bf33cbc3c5e941b71ba2ea3adae9861422f40789a1b35ac9cd73d19d9d9ce4
-
SSDEEP
3072:Nd+3IoaOqhjsfDl02A6UCSMHnBQIM/9mVympwfFRQfVE:H+4oaOqhj2DzUCxHnBvM/9mVympwfFau
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/57166146af2e8e463cb70ff74b787473600941427569db083a96655728063541.elf/tmp/57166146af2e8e463cb70ff74b787473600941427569db083a96655728063541.elf1⤵
- Reads system routing table
- Reads system network configuration