Analysis
-
max time kernel
7s -
max time network
24s -
platform
debian-12_mipsel -
resource
debian12-mipsel-20240221-en -
resource tags
-
submitted
28-12-2024 02:35
General
-
Target
8ad68a6dd76f0ca58d1651343916807370fabc294394c12cb4209d5cdb7dc259.elf
-
Size
75KB
-
MD5
909e68d7f9baf5b2c79023ca027aa132
-
SHA1
1a17caa726700e04242251f101298bf209c54c18
-
SHA256
8ad68a6dd76f0ca58d1651343916807370fabc294394c12cb4209d5cdb7dc259
-
SHA512
31c1925c839304e1336d1b09a0e30734ff6bb2d476ae6174eebfebce5664ff8944e2acd986b57b2e0045ba6a1f760d7003cb3920fdf3746789df321423f7579e
-
SSDEEP
1536:7J5dbFB4x92nKoIHa98M26ofWU+UZ9CYXzdJa10o:7J5dxBu9uKoqIUXd4f
Score
6/10
Malware Config
Signatures
-
Enumerates active TCP sockets 1 TTPs 1 IoCs
Gets active TCP sockets from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/8ad68a6dd76f0ca58d1651343916807370fabc294394c12cb4209d5cdb7dc259.elf/tmp/8ad68a6dd76f0ca58d1651343916807370fabc294394c12cb4209d5cdb7dc259.elf1⤵
- Enumerates active TCP sockets
- Reads system network configuration