c16df270c0878921aad57519b7865cbf654c5d76ab4fe22ad2343bf22f36da7e

Analysis

max time kernel
20941s
max time network
127s
platform
linux_amd64
resource
ubuntu1804-amd64-en-20211208
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
08-08-2022 01:52

Target

c9841c349d67618f4f76adb9d5e1df00
Size

83KB
MD5

c9841c349d67618f4f76adb9d5e1df00
SHA1

57390c22fc0a5e1c009cb56486dc13d0862da37f
SHA256

c16df270c0878921aad57519b7865cbf654c5d76ab4fe22ad2343bf22f36da7e
SHA512

e88fbdd87f9e7cbc5bd01e6aa26eaa397e2ef56657da9764be6bca14b541242f5fc3ea95c0a80f861922614db52d167cb87e22add46ecc1f4be2030f9a8366ae

Score

7^/10

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery
T1016

Processes:

c9841c349d67618f4f76adb9d5e1df00

description ioc process

/proc/net/route /proc/net/route c9841c349d67618f4f76adb9d5e1df00
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery
T1016

Processes:

c9841c349d67618f4f76adb9d5e1df00

description ioc process

/proc/net/route /proc/net/route c9841c349d67618f4f76adb9d5e1df00

description	ioc	process
/proc/net/route	/proc/net/route	c9841c349d67618f4f76adb9d5e1df00

description	ioc	process
/proc/net/route	/proc/net/route	c9841c349d67618f4f76adb9d5e1df00

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact