Analysis
-
max time kernel
150s -
max time network
157s -
platform
debian-12_armhf -
resource
debian12-armhf-20240221-en -
resource tags
arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem -
submitted
26/02/2025, 03:55
Behavioral task
behavioral1
Sample
8ce4f88f8b34ac0aeba4770131c43db339fbfccf46425c53566ef5f8a4f19f97.elf
Resource
debian12-armhf-20240221-en
2 signatures
150 seconds
General
-
Target
8ce4f88f8b34ac0aeba4770131c43db339fbfccf46425c53566ef5f8a4f19f97.elf
-
Size
150KB
-
MD5
c3b536ca5e61a31d14652ac7534c6f1d
-
SHA1
31b5e959d3f515f61c711e1833179773409190f2
-
SHA256
8ce4f88f8b34ac0aeba4770131c43db339fbfccf46425c53566ef5f8a4f19f97
-
SHA512
9cbe036d4bb4ffb21927f3124ac1f61e5ac8cf1c3f02057d36e7f035f3ecd58b8c2aa2e7bf632f39efc636bbd9a65df9f4600cc9be1ccef61318fb0f5d933d61
-
SSDEEP
3072:Tdbmn8aAEHqgSkano1DTAc5hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDTl5hWTGU2WV7ldmpwTsLS
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route 8ce4f88f8b34ac0aeba4770131c43db339fbfccf46425c53566ef5f8a4f19f97.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route 8ce4f88f8b34ac0aeba4770131c43db339fbfccf46425c53566ef5f8a4f19f97.elf