Overview

overview

10

Static

static

10

7691bc26f6...72.elf

debian-9-armhf

6

Analysis

  • max time kernel
    140s
  • max time network
    148s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240418-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240418-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    21/02/2025, 03:24

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    7691bc26f63eba56f496d5e610ab9cbbfd1b1b39f27b5571dd59a799c3334b72.elf

  • Size

    103KB

  • MD5

    65e82ae08897c4aa2fabd0fbdf03e517

  • SHA1

    103458b043607d921cfc6ee9bc9fd3151f73e9c2

  • SHA256

    7691bc26f63eba56f496d5e610ab9cbbfd1b1b39f27b5571dd59a799c3334b72

  • SHA512

    3405418e789d1362344bb636f60cd223e8460328949cec5f02935136002a4afeef66ac4dd959dd9f35310e2a0012f2077466ce5e8919de96d3f56d006db463fe

  • SSDEEP

    1536:Z0550bcQpUP4418vfpSTY+gA0BOLNv2xP3P/P3OjkypFmCKrQAFW9LhZaQ:dcnP43rA32xPvOnFmCKrQAFiLhZaQ

Score
6/10
discovery

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

    discovery
  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

    discovery

Processes

  • /tmp/7691bc26f63eba56f496d5e610ab9cbbfd1b1b39f27b5571dd59a799c3334b72.elf
    /tmp/7691bc26f63eba56f496d5e610ab9cbbfd1b1b39f27b5571dd59a799c3334b72.elf
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:638

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads