Analysis
-
max time kernel
140s -
max time network
163s -
platform
debian-12_armhf -
resource
debian12-armhf-20240221-en -
resource tags
-
submitted
11-12-2024 02:53
General
-
Target
71c93a7aee9e684174275c0e4a17015357b6bdb64a945c65010822f944211b57.elf
-
Size
167KB
-
MD5
5fd12602f32ced194f9300b0df2aa1d9
-
SHA1
a948c368ac016f201c17b863246496bd4d99c84e
-
SHA256
71c93a7aee9e684174275c0e4a17015357b6bdb64a945c65010822f944211b57
-
SHA512
4d0456d3bf5f92a3ee4ae389cfb4d204672f3847822fb54077a1c697bdb6c5d5b4c26f1a8411e7d6ad5f75c9a21f99e7f9a5ca7ebae3e8dc82202822b2306cff
-
SSDEEP
3072:Fw1aOPNmJEgpYD98SD6qK4m3AHxVbNGHdm+wN8dQSl2:y1aOPNmJFpLI674m3AHxVJGHdm+wN8OR
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/71c93a7aee9e684174275c0e4a17015357b6bdb64a945c65010822f944211b57.elf/tmp/71c93a7aee9e684174275c0e4a17015357b6bdb64a945c65010822f944211b57.elf1⤵
- Reads system routing table
- Reads system network configuration