7b7758d4c9848527b4ca82f077b730e7faea066494e40a37303750b42ca1ba86

Analysis

max time kernel
0s
max time network
102s
platform
linux_amd64
resource
ubuntu1804-amd64-en-20211208
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
15-11-2022 15:55

Target

7b7758d4c9848527b4ca82f077b730e7faea066494e40a37303750b42ca1ba86.elf
Size

8.5MB
MD5

23d4b53263ac290ab124583032c564ee
SHA1

5f4242126d304eb447d27f7e8dee8c4cfb65fc99
SHA256

7b7758d4c9848527b4ca82f077b730e7faea066494e40a37303750b42ca1ba86
SHA512

cd7d2637508b956c83a1eadc278bacf57dea84d77d46f9511b878fd34ba300ccbc532571ffcd188e70ea2eb9888a62076649253cfcf155e6a0211db5b76a05a9
SSDEEP

49152:vvJFpzbOrb/T9vO90dL3BmAFd4A64nsfJk0Pj7BBN+Z+brj8xwFCnWZHB2kTI57r:F7B2EUe0htrtYd8ikxuJE7gNRZw

Score

5^/10

Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

System Information Discovery

Processes:

7b7758d4c9848527b4ca82f077b730e7faea066494e40a37303750b42ca1ba86.elf

description	ioc	process
/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	7b7758d4c9848527b4ca82f077b730e7faea066494e40a37303750b42ca1ba86.elf

/tmp/7b7758d4c9848527b4ca82f077b730e7faea066494e40a37303750b42ca1ba86.elf
/tmp/7b7758d4c9848527b4ca82f077b730e7faea066494e40a37303750b42ca1ba86.elf
1⤵
- Enumerates kernel/hardware configuration
PID:581

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact