Overview

overview

10

Static

static

10

40a2709316...bc.elf

debian-9-armhf

6

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240729-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240729-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    07-01-2025 02:13

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    40a2709316b4f721d61070845395b232ed4762db4b904f0cab66e931828425bc.elf

  • Size

    112KB

  • MD5

    d7b9aff6562fd20e5e8bd777a7c4de3b

  • SHA1

    1d02a38792ed91f03daf7c3d058c9283803a09ff

  • SHA256

    40a2709316b4f721d61070845395b232ed4762db4b904f0cab66e931828425bc

  • SHA512

    5ae3d1688795baabd4d08c9c5ade0b1afb468eafdb4b0571afad87018ce03f594a4635cb0c5153b3e830539fd14547732cb976d65874d6b01f822c6557d3f67f

  • SSDEEP

    3072:ULveOu+5FClWUaVeDYeQ1C5hiBrn1Gm0Qxu1bXWIn:6v78EVeDYH1C5hiBrn1Gm0Qxu1rWIn

Score
6/10
discovery

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

    discovery
  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

    discovery

Processes

  • /tmp/40a2709316b4f721d61070845395b232ed4762db4b904f0cab66e931828425bc.elf
    /tmp/40a2709316b4f721d61070845395b232ed4762db4b904f0cab66e931828425bc.elf
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:639

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads