Analysis
-
max time kernel
147s -
max time network
154s -
platform
debian-12_armhf -
resource
debian12-armhf-20240221-en -
resource tags
-
submitted
05-12-2024 03:37
General
-
Target
ecf9aec786d076bc03b9719906748e92ab1a376ca6656fbea6eee3cbaa6f8a83.elf
-
Size
150KB
-
MD5
204cff877852881330d18e113ffc6084
-
SHA1
f70ea4f943c5928ea2017d582bc63c0a989d439c
-
SHA256
ecf9aec786d076bc03b9719906748e92ab1a376ca6656fbea6eee3cbaa6f8a83
-
SHA512
9d1289abf55fbe1ab1b0a65c1f847158faef81db31d0123a05ff43708a076166b4a187a65907d8e913b88d897ff7f625fd13cea907c762d8d30a0b4688aaf8b8
-
SSDEEP
3072:Tdbmn8aAEHqgSkano1DTAX5hWTGZWYxVlxXmpwTsL/QMyn:he8aAEHKkdDTK5hWTGZWYxVldmpwTsLS
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/ecf9aec786d076bc03b9719906748e92ab1a376ca6656fbea6eee3cbaa6f8a83.elf/tmp/ecf9aec786d076bc03b9719906748e92ab1a376ca6656fbea6eee3cbaa6f8a83.elf1⤵
- Reads system routing table
- Reads system network configuration