Overview

overview

10

Static

static

10

911503b802...335003

debian-9-armhf

6

Analysis

  • max time kernel
    140s
  • max time network
    158s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    29-12-2024 08:19

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    911503b802fbecf94d55b858af87cbd38eae1b133f2eb6898f8b7f8ce5335003

  • Size

    124KB

  • MD5

    c6bf412d0388bbca9429f5eb01801c3b

  • SHA1

    bc21d2be98607855bf1b23884dd2d1e636e2e7ed

  • SHA256

    911503b802fbecf94d55b858af87cbd38eae1b133f2eb6898f8b7f8ce5335003

  • SHA512

    74a07be0e5fa8172277fec77ea01019036aa7fe22873ed5adf7b862b6d08f1d9a9c96a67cd9a3af488527ba4e061aa018ebe96239e05afba42ed4b55cdca4adc

  • SSDEEP

    3072:KdB2qwap6KVXPi4jv8x+3MDkmDhZmTQOIsXAqE:aRwap6Kt6+3MDHZmTQOICAqE

Score
6/10
discovery

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

    discovery
  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

    discovery

Processes

  • /tmp/911503b802fbecf94d55b858af87cbd38eae1b133f2eb6898f8b7f8ce5335003
    /tmp/911503b802fbecf94d55b858af87cbd38eae1b133f2eb6898f8b7f8ce5335003
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:661

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads