Overview

overview

10

Static

static

10

f2fd97aba6...93.elf

debian-12-armhf

6

Analysis

  • max time kernel
    141s
  • max time network
    165s
  • platform
    debian-12_armhf
  • resource
    debian12-armhf-20240221-en
  • resource tags

    arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
  • submitted
    30-11-2024 03:25

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    f2fd97aba6b540851480818f6623bbb6d35757437c387a2e174c7c5398ed2493.elf

  • Size

    150KB

  • MD5

    1b8f4843dd6df6374c23b04c7c5538be

  • SHA1

    b9f0a88db5b015bf605095f4ca0651db5fc71999

  • SHA256

    f2fd97aba6b540851480818f6623bbb6d35757437c387a2e174c7c5398ed2493

  • SHA512

    d2c67693cb35f05a6a89e9c7425dd2d037ba51139cad061ec4e5246e2a682a807b5bd3688a4b201b9d1b132521759563526d63e5b570276b5119c0feba91bf86

  • SSDEEP

    3072:Tdbmn8aAEHqgSkano1DTAJ5hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDTc5hWTGU2WV7ldmpwTsLS

Score
6/10
discovery

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

    discovery
  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

    discovery

Processes

  • /tmp/f2fd97aba6b540851480818f6623bbb6d35757437c387a2e174c7c5398ed2493.elf
    /tmp/f2fd97aba6b540851480818f6623bbb6d35757437c387a2e174c7c5398ed2493.elf
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:710

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads