f88614efbadc891d6c199d80de3ad3d0e08b3811a20c5cf01d66ac2c8d17fe59

Analysis

max time kernel
7709s
max time network
137s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20221111-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20221111-enkernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
08-02-2023 23:44

Target

chernobyl.x86.elf
Size

94KB
MD5

10f1cdf97872d32818219c28c756d91b
SHA1

532f20987117a5b104d55bcfe15c0c11a55d9c83
SHA256

f88614efbadc891d6c199d80de3ad3d0e08b3811a20c5cf01d66ac2c8d17fe59
SHA512

26fc479755afc6802bb8735cb68a02b2b7ece3361175338f150138de6ed5778f4ffa33a13aec78afbcc53986b5a81909d776878a8743732c07fec422fe796101
SSDEEP

1536:U7V4QXQy0EINE3/i7CZ3Qwmr38QUdGvbSgJWAQNI6mA+BWYXFUjaZ3tX:aDQPEINAFlQwK8zgOdPm/BWYXFYaZ3tX

Score

7^/10

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery
T1016

Processes:

chernobyl.x86.elf

description ioc process

/proc/net/route /proc/net/route chernobyl.x86.elf
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery
T1016

Processes:

chernobyl.x86.elf

description ioc process

/proc/net/route /proc/net/route chernobyl.x86.elf

description	ioc	process
/proc/net/route	/proc/net/route	chernobyl.x86.elf

description	ioc	process
/proc/net/route	/proc/net/route	chernobyl.x86.elf

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact