5fc00d7d31cf6ce280e2d0885334e037ac7d5f9afd4f17455f45a6ef5ee07bd3

Analysis

max time kernel
140s
max time network
159s
platform
debian-12_armhf
resource
debian12-armhf-20240221-en
resource tags

arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
30-12-2024 02:48

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

88bc257bb1c1747a4871632b6840cd3f32fe27951ae37ee03be39d32365f7f30
Size

118KB
MD5

8a75ab456b6a345207402fd49cde6b00
SHA1

52f69e4131b19d137ed705728315a9f430df9e21
SHA256

88bc257bb1c1747a4871632b6840cd3f32fe27951ae37ee03be39d32365f7f30
SHA512

22fe15210b28d4c0fad2c077b295f8512309dd8dacbc423693236c99e7c81db595fca307f0625f1c0f473fe7a53e0f892570b24e4c8c1fb106139b18391457d8
SSDEEP

3072:ekYPUfsgnsb0J2ag/Vf/kDN0dn+mTQOY5NX3cn:9YPUfsgEo2a0/kDy+mTQOY5R3cn

Score

6^/10

discovery

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	88bc257bb1c1747a4871632b6840cd3f32fe27951ae37ee03be39d32365f7f30

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	88bc257bb1c1747a4871632b6840cd3f32fe27951ae37ee03be39d32365f7f30

/tmp/88bc257bb1c1747a4871632b6840cd3f32fe27951ae37ee03be39d32365f7f30
/tmp/88bc257bb1c1747a4871632b6840cd3f32fe27951ae37ee03be39d32365f7f30
1⤵
- Reads system routing table
- Reads system network configuration
PID:710

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads