Analysis
-
max time kernel
147s -
max time network
150s -
platform
debian-12_armhf -
resource
debian12-armhf-20240729-en -
resource tags
-
submitted
19/02/2025, 05:49
General
-
Target
d71a424563270b288070cd8e7c35e0636422c96a24f7e39ba6eb4c1be4b48d14.elf
-
Size
118KB
-
MD5
230fded12db7339d3a9fef64248e25a9
-
SHA1
e41493b48e0ffcdd3f84ce7fbf7c37e367dbef51
-
SHA256
d71a424563270b288070cd8e7c35e0636422c96a24f7e39ba6eb4c1be4b48d14
-
SHA512
9263f03e6feb56b55cb133918aaacb45fa7495634377bce017505a30c02b66ae693e6cc72cf985fb5c27eb689543792617ba4c22580927f9df919b8fb6527bbd
-
SSDEEP
3072:ekYPUfsgnsb0J2ag/VfCkDN0dn+mTQOY5NX3cn:9YPUfsgEo2a0CkDy+mTQOY5R3cn
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/d71a424563270b288070cd8e7c35e0636422c96a24f7e39ba6eb4c1be4b48d14.elf/tmp/d71a424563270b288070cd8e7c35e0636422c96a24f7e39ba6eb4c1be4b48d14.elf1⤵
- Reads system routing table
- Reads system network configuration