Analysis
-
max time kernel
150s -
max time network
157s -
platform
debian-12_armhf -
resource
debian12-armhf-20240221-en -
resource tags
arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem -
submitted
22-11-2024 18:21
Behavioral task
behavioral1
Sample
m-6.8-k.Logicnet.elf
Resource
debian12-armhf-20240221-en
debian-12-armhf
2 signatures
150 seconds
General
-
Target
m-6.8-k.Logicnet.elf
-
Size
156KB
-
MD5
19aeb425aa11510ba4d8f6bde0c2bebe
-
SHA1
7cccba8567b084ba870dce88c7da597313264260
-
SHA256
35c8622596f89014d9e44b634610c2f6940406aa45918a873e808f94af4e4913
-
SHA512
dd68d5948d2e3c27526245ec4516883f4e64f209fcbfc322700029a05d991c43832f84b1ce0d1d1db9d16bdcb39199ecabd362a2dfb7046625e427bb5f3c859f
-
SSDEEP
3072:T1g2/eINNlzx2kkQCMOaQcvBKYnyLRM/9pSQomFwfBxKQodn:hg2hNNlzIkk/MOa/UYnydM/9LomFwfBC
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
Processes:
m-6.8-k.Logicnet.elfdescription ioc Process File opened for reading /proc/net/route m-6.8-k.Logicnet.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes:
m-6.8-k.Logicnet.elfdescription ioc Process File opened for reading /proc/net/route m-6.8-k.Logicnet.elf