Analysis
-
max time kernel
145s -
max time network
147s -
platform
debian-12_armhf -
resource
debian12-armhf-20240418-en -
resource tags
-
submitted
21/02/2025, 04:07
General
-
Target
c9c6db1058b3d086d78188b000b0cf78513a5f1d7fa72eadaa7bce26db0c5826.elf
-
Size
150KB
-
MD5
91611d3c52443be597a849eec33f13de
-
SHA1
539ac5fc32376b47a3758453e1180d051d765471
-
SHA256
c9c6db1058b3d086d78188b000b0cf78513a5f1d7fa72eadaa7bce26db0c5826
-
SHA512
0346bfba625009233b61853317a544886fe82a1ed47104f44e0b8a7b066be836ae4276bd12a87a4a63898b5a4f8cd34e49f44201100d4712c33dd9d1b0a96c46
-
SSDEEP
3072:Tdbmn8aAEHqgSkano1DTAc5hWTGZWYxVlxXmpwTsL/QMyn:he8aAEHKkdDT95hWTGZWYxVldmpwTsLS
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/c9c6db1058b3d086d78188b000b0cf78513a5f1d7fa72eadaa7bce26db0c5826.elf/tmp/c9c6db1058b3d086d78188b000b0cf78513a5f1d7fa72eadaa7bce26db0c5826.elf1⤵
- Reads system routing table
- Reads system network configuration