88c459917f3bb33ae58116bb24567e046c733882d9fede66c8374cad122e4254

Analysis

max time kernel
149s
max time network
153s
platform
debian-9_armhf
resource
debian9-armhf-20240611-en
resource tags

arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
22-11-2024 18:28

Target

a-r.m-5.Logicnet.elf
Size

98KB
MD5

eef7d6a2539372a8d18f30b97ef3b3be
SHA1

a3f4fd66d4618f47ced42e8fc1a26a3fada10cce
SHA256

88c459917f3bb33ae58116bb24567e046c733882d9fede66c8374cad122e4254
SHA512

a7742ebb2e06ce1d83b9d61970740c446ab921f835f16cc52765fe7c0ffdecd141e9db5a352aed153e16aabb016ea559367ccb3075f83a5f2cec4902d194864c
SSDEEP

3072:VSx+i6mqaObhNUnPLGd22mZuqQ4DPwXXtse:y6mRObnUnPp2mZuqQ4DPwXXtse

Score

6^/10

discovery

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
discovery

Internet Connection Discovery
T1016.001

Processes:

a-r.m-5.Logicnet.elf

description ioc process

File opened for reading /proc/net/route a-r.m-5.Logicnet.elf
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
discovery

Internet Connection Discovery
T1016.001

Processes:

a-r.m-5.Logicnet.elf

description ioc process

File opened for reading /proc/net/route a-r.m-5.Logicnet.elf

description	ioc	process
File opened for reading	/proc/net/route	a-r.m-5.Logicnet.elf

description	ioc	process
File opened for reading	/proc/net/route	a-r.m-5.Logicnet.elf

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact