Analysis
-
max time kernel
146s -
max time network
154s -
platform
debian-12_armhf -
resource
debian12-armhf-20240221-en -
resource tags
-
submitted
05-12-2024 03:07
General
-
Target
b27cb4f79ba1a3f97ec2d6c90103027c5838578286cb253fea503721388a98f9.elf
-
Size
150KB
-
MD5
a2933870908b93eddb9a79ab994d27fa
-
SHA1
069fe8388af605f6d69b4b8bc1d42c1df97e2dc5
-
SHA256
b27cb4f79ba1a3f97ec2d6c90103027c5838578286cb253fea503721388a98f9
-
SHA512
5dd52f939e8b67e216d3964271f0076c5168af3c7158aab88293253e366e8a978b506d9c706847ffae3911ed6db193193d91c633bd7bda1635a96fdddf49f114
-
SSDEEP
3072:Tdbmn8aAEHqgSkano1DTAX5hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDTK5hWTGU2WV7ldmpwTsLS
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/b27cb4f79ba1a3f97ec2d6c90103027c5838578286cb253fea503721388a98f9.elf/tmp/b27cb4f79ba1a3f97ec2d6c90103027c5838578286cb253fea503721388a98f9.elf1⤵
- Reads system routing table
- Reads system network configuration