Analysis

  • max time kernel
    150s
  • max time network
    157s
  • platform
    debian-12_armhf
  • resource
    debian12-armhf-20240221-en
  • resource tags

    arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
  • submitted
    26/02/2025, 03:55

General

  • Target

    8ce4f88f8b34ac0aeba4770131c43db339fbfccf46425c53566ef5f8a4f19f97.elf

  • Size

    150KB

  • MD5

    c3b536ca5e61a31d14652ac7534c6f1d

  • SHA1

    31b5e959d3f515f61c711e1833179773409190f2

  • SHA256

    8ce4f88f8b34ac0aeba4770131c43db339fbfccf46425c53566ef5f8a4f19f97

  • SHA512

    9cbe036d4bb4ffb21927f3124ac1f61e5ac8cf1c3f02057d36e7f035f3ecd58b8c2aa2e7bf632f39efc636bbd9a65df9f4600cc9be1ccef61318fb0f5d933d61

  • SSDEEP

    3072:Tdbmn8aAEHqgSkano1DTAc5hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDTl5hWTGU2WV7ldmpwTsLS

Score
6/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/8ce4f88f8b34ac0aeba4770131c43db339fbfccf46425c53566ef5f8a4f19f97.elf
    /tmp/8ce4f88f8b34ac0aeba4770131c43db339fbfccf46425c53566ef5f8a4f19f97.elf
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:709

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads