Overview

overview

10

Static

static

10

hidakibest.arm7.elf

debian-9-armhf

6

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240418-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240418-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    22-11-2024 23:12

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    hidakibest.arm7.elf

  • Size

    150KB

  • MD5

    5e3d9f136b6f8678a296c7ac32584b66

  • SHA1

    670c65c0d58ae9b251403b26182d7ac92ca6d0b1

  • SHA256

    b60475b4eec388c349074f1972d7622ccd299a4b363d43dc22ad9a2c4bec0235

  • SHA512

    52e4feb9530efd9926adbd8551d5958c7de7978e1bcb0e36a32eabd57af3b691364a9aa6c838d04f5bf1bfc498f8438e74fe6a613eb90ffeed7b00c6c67f9869

  • SSDEEP

    3072:/dQbnQao0HawD+zQNz7gb5hZ1GHJWM/9kxHmpwTsL/QMyn:VmQao0H3D9z7+5hZ1GHIM/9kNmpwTsLS

Score
6/10
discovery

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

    discovery
  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

    discovery

Processes

  • /tmp/hidakibest.arm7.elf
    /tmp/hidakibest.arm7.elf
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:638

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads