Analysis
-
max time kernel
149s -
max time network
151s -
platform
debian-9_armhf -
resource
debian9-armhf-20240611-en -
resource tags
-
submitted
14-11-2024 03:17
General
-
Target
ee639d76a27332dba16bf94fedc83f42a79f2b69d77054c5e1a95bb8a98a62e7.elf
-
Size
102KB
-
MD5
b1d59af683e49796a504f9e62ca2c646
-
SHA1
88b4d6ad80a11f23b3f65a706b73332a2dfe16fc
-
SHA256
ee639d76a27332dba16bf94fedc83f42a79f2b69d77054c5e1a95bb8a98a62e7
-
SHA512
2a67c8539d19338b0c9acf05392294eff59ec31e0fcd30531135ec0cd318f0a93e1f3817cf8017102ccfcf65e228d1d09e15c988593049eb29b592bb8de7cecb
-
SSDEEP
3072:Plf1jKRi/VYf84Yfk7XTRUmpEqQ45vVXY0X:vjdVC7Yfk7qmpEqQ45vVXY0X
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/ee639d76a27332dba16bf94fedc83f42a79f2b69d77054c5e1a95bb8a98a62e7.elf/tmp/ee639d76a27332dba16bf94fedc83f42a79f2b69d77054c5e1a95bb8a98a62e7.elf1⤵
- Reads system routing table
- Reads system network configuration