Analysis
-
max time kernel
5s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20240611-en -
resource tags
-
submitted
07/03/2025, 07:09
General
-
Target
caf96fd0fd94e984e29427f6c3818cda992ed2e1102bdd528870028a0ff2848f.elf
-
Size
92KB
-
MD5
7153ae0fb8bf54ab2ed84058eff6fa6f
-
SHA1
e00368d2c28b4db72abd2f0306b87093ccb84e5c
-
SHA256
caf96fd0fd94e984e29427f6c3818cda992ed2e1102bdd528870028a0ff2848f
-
SHA512
c992e92bddf7dbb6f89668301b0c2dc4a908c703ac199ec28be7085f1bc23d3d5c75f1af5e9d405b9b0cf1e243b4b5aff0f1590a474f22118908e8dc419e6846
-
SSDEEP
1536:OwIBiXzNCI0qWAACj9CFre/f32lgaTZRSiH/HXDU/7410CFY:OwIkXz30vAA+j32ljTfDW4HF
Score
6/10
Malware Config
Signatures
-
Enumerates active TCP sockets 1 TTPs 1 IoCs
Gets active TCP sockets from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/caf96fd0fd94e984e29427f6c3818cda992ed2e1102bdd528870028a0ff2848f.elf/tmp/caf96fd0fd94e984e29427f6c3818cda992ed2e1102bdd528870028a0ff2848f.elf1⤵
- Enumerates active TCP sockets
- Reads system network configuration