Analysis
-
max time kernel
150s -
max time network
152s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20240611-en -
resource tags
arch:mipselimage:debian9-mipsel-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
23-11-2024 02:23
Behavioral task
behavioral1
Sample
4aa707dd0c34e4cc45f1d9b3ae8e65cf79a75afdd2ad187530c57718521e4d48.elf
Resource
debian9-mipsel-20240611-en
debian-9-mipsel
2 signatures
150 seconds
General
-
Target
4aa707dd0c34e4cc45f1d9b3ae8e65cf79a75afdd2ad187530c57718521e4d48.elf
-
Size
141KB
-
MD5
82312e0fd76477eedf7712408aac2d5c
-
SHA1
42170c28b4468340e77fa1cd50db2827fce379a7
-
SHA256
4aa707dd0c34e4cc45f1d9b3ae8e65cf79a75afdd2ad187530c57718521e4d48
-
SHA512
940664cdecad94e8085a5e48ae89441067e586b53403a56e451105644e251d2a44ec1f051ae03a7e9202ebd27a677a8489052a722b54a23d53ede860f2ded0cb
-
SSDEEP
3072:lBDH4L9VHGn7vs95h9DLHpVFm0/5ApYADn:lhHaWvs95h9Hp7m0/5ASADn
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
Processes:
4aa707dd0c34e4cc45f1d9b3ae8e65cf79a75afdd2ad187530c57718521e4d48.elfdescription ioc Process File opened for reading /proc/net/route 4aa707dd0c34e4cc45f1d9b3ae8e65cf79a75afdd2ad187530c57718521e4d48.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes:
4aa707dd0c34e4cc45f1d9b3ae8e65cf79a75afdd2ad187530c57718521e4d48.elfdescription ioc Process File opened for reading /proc/net/route 4aa707dd0c34e4cc45f1d9b3ae8e65cf79a75afdd2ad187530c57718521e4d48.elf