Overview

overview

10

Static

static

10

172c27f4db...bf.elf

debian-9-armhf

6

Analysis

  • max time kernel
    147s
  • max time network
    160s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    27-12-2024 02:09

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    172c27f4db94fe22346ac3f75303dc2a851f48eaba784d083365ec1a396717bf.elf

  • Size

    150KB

  • MD5

    7ab971aa7550c4f6f163521e1fa28cae

  • SHA1

    d6df5deb85b2bd66ebce6ccf6ed6eaa82c30b1bb

  • SHA256

    172c27f4db94fe22346ac3f75303dc2a851f48eaba784d083365ec1a396717bf

  • SHA512

    31e3a9e6ccea09d8e7faa7a29bfbaad33b43a4bea67983d845a01f3d5685017bf558698ee89f1a649efb965b6339434273ea7653bfb851c514afb3c6ee59fba6

  • SSDEEP

    3072:Tdbmn8aAEHqgSkano1DTAM5hWTGHJWM/9lxXmpwTsL/QMyn:he8aAEHKkdDT15hWTGHIM/9ldmpwTsLS

Score
6/10
discovery

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

    discovery
  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

    discovery

Processes

  • /tmp/172c27f4db94fe22346ac3f75303dc2a851f48eaba784d083365ec1a396717bf.elf
    /tmp/172c27f4db94fe22346ac3f75303dc2a851f48eaba784d083365ec1a396717bf.elf
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:663

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads