Analysis

  • max time kernel
    150s
  • max time network
    154s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    29-11-2024 03:43

General

  • Target

    94b7a1510dc186e3bd1973c973c77bbafda47ea646fc91d841e6caedb64543c4.elf

  • Size

    150KB

  • MD5

    fe84568cc26b482abaea48e5ff1c260f

  • SHA1

    54516d0d871405113fa7d1f5e652fdda493e5657

  • SHA256

    94b7a1510dc186e3bd1973c973c77bbafda47ea646fc91d841e6caedb64543c4

  • SHA512

    7031ab1b506d9a3d703efca367785eaa5bd85f62b838145fa87734200a571b1649c509418d9a34b34653f61eadd8f3777ecc8c75acb8592ca73cedfeb9247ace

  • SSDEEP

    3072:Tdbmn8aAEHqgSkano1DTAw5hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDTx5hWTGU2WV7ldmpwTsLS

Score
6/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/94b7a1510dc186e3bd1973c973c77bbafda47ea646fc91d841e6caedb64543c4.elf
    /tmp/94b7a1510dc186e3bd1973c973c77bbafda47ea646fc91d841e6caedb64543c4.elf
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:668

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads