3076007d721bf1429983962438de193c39e67cd78c75336b3e9bd9855ea5beb5

Analysis

max time kernel
149s
max time network
162s
platform
debian-12_armhf
resource
debian12-armhf-20240221-en
resource tags

arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
11-01-2025 07:22

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ssd.elf
Size

109KB
MD5

af4ae224675ae5f9774c06dcfb78033a
SHA1

bfb636576e3e53cbe672712cce723e7ad7661eb3
SHA256

3076007d721bf1429983962438de193c39e67cd78c75336b3e9bd9855ea5beb5
SHA512

f1e69497516b3b3f29d1dc791d8d66cd20209e26d89a0bdf4f1e543858ff0701e06a7fe38e7d228b8ce1afa23001f2e814d1217154d1935a72c9f63fec2bba6e
SSDEEP

3072:DKmA8aOS17tm2KOJxJsTDGgqW8bmTQOWsXAOn:Dc8aOS17xJsTDQbmTQOWCAOn

Score

6^/10

discovery

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	ssd.elf

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	ssd.elf

/tmp/ssd.elf
/tmp/ssd.elf
1⤵
- Reads system routing table
- Reads system network configuration
PID:710

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads