Analysis
-
max time kernel
148s -
max time network
161s -
platform
debian-12_armhf -
resource
debian12-armhf-20240221-en -
resource tags
-
submitted
22/02/2025, 02:37
General
-
Target
0fc4ee58bb0d24f0d01d173a669b4e5a9822ef6aca4247d86473e86e63cbddac.elf
-
Size
116KB
-
MD5
99e5bf13cebd5bb2d4724945341c0c68
-
SHA1
7fd10f2a46280617b1c8707ad558970a97edee13
-
SHA256
0fc4ee58bb0d24f0d01d173a669b4e5a9822ef6aca4247d86473e86e63cbddac
-
SHA512
0a0a48654c3a2418311354714944b1abd89a55ab964191633a8cdc68ce82fa1d64cfa7d46d5d1870ce466790c7b363ec5aceee962659e5a3c2bba528c91c2a7a
-
SSDEEP
3072:Yd5adFfNQamBJl1OL5hudKRvF2/bBbmOQUJ1UXpTn:E5adFf4OL5hudK9FabBbmOQUJ1apTn
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/0fc4ee58bb0d24f0d01d173a669b4e5a9822ef6aca4247d86473e86e63cbddac.elf/tmp/0fc4ee58bb0d24f0d01d173a669b4e5a9822ef6aca4247d86473e86e63cbddac.elf1⤵
- Reads system routing table
- Reads system network configuration