bb6caf3168dbf71d44139c123e24d4612fbeaab958d70a5f8434a4a38183f8ab

Analysis

max time kernel
149s
max time network
164s
platform
debian-12_armhf
resource
debian12-armhf-20240221-en
resource tags

arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
09/03/2025, 07:32

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

m-6.8-k.opticus.elf
Size

161KB
MD5

1a0f1649c5a72726c15c936d0c96161c
SHA1

682f18d242c6b04e457f632987556184a048963e
SHA256

bb6caf3168dbf71d44139c123e24d4612fbeaab958d70a5f8434a4a38183f8ab
SHA512

750df932d445399e103d34b88d06477d6a90a3729fd019a761cb0822e1dbfd4467a951c584fda588148e3fb1f314a5ab546918157ef7c349b8c344bf5ceab298
SSDEEP

3072:AdkbJBagqhj7yLWcugMcrS5LnpQEM/9q4MCmpwfFRQfVE:MkNBagqhjWLycrkLnpzM/95MCmpwfFau

Score

6^/10

discovery

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	m-6.8-k.opticus.elf

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	m-6.8-k.opticus.elf

/tmp/m-6.8-k.opticus.elf
/tmp/m-6.8-k.opticus.elf
1⤵
- Reads system routing table
- Reads system network configuration
PID:709

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads