Overview

overview

10

Static

static

10

983e19517a...5b.elf

debian-12-armhf

6

Analysis

  • max time kernel
    123s
  • max time network
    191s
  • platform
    debian-12_armhf
  • resource
    debian12-armhf-20240221-en
  • resource tags

    arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
  • submitted
    23-11-2024 02:43

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    983e19517ae90c2905a1c5071e1afa031d6cfce9d2377ceb74c45dc2e086625b.elf

  • Size

    150KB

  • MD5

    2019d6f3ca9696122b2a46bde0c22e9a

  • SHA1

    8e95db4f407919b1bed25258b2ab7af56e2a0c52

  • SHA256

    983e19517ae90c2905a1c5071e1afa031d6cfce9d2377ceb74c45dc2e086625b

  • SHA512

    10d7899176eeb63acba225484db1b2102c80e3ac8dabd6314476f583984c0258d3624a9d885af5d42bda0f7ddada102217a0a464d4a86ba72bb6d8d77b7a7d7b

  • SSDEEP

    3072:/dQbnQao0HawD+zQNz7gb5hZ1GU2WV7kxHmpwTsL/QMyn:VmQao0H3D9z7+5hZ1GU2WV7kNmpwTsLS

Score
6/10
discovery

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

    discovery
  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

    discovery

Processes

  • /tmp/983e19517ae90c2905a1c5071e1afa031d6cfce9d2377ceb74c45dc2e086625b.elf
    /tmp/983e19517ae90c2905a1c5071e1afa031d6cfce9d2377ceb74c45dc2e086625b.elf
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:706

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads