8f6a2c5d17f924af5435f1d6c42d7af0cbf208fc0296184f1e95e79125cd6e17

Analysis

max time kernel
8331s
max time network
134s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20221111-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20221111-enkernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
16-02-2023 04:41

Target

x-8.6-.INFINITY.elf
Size

151KB
MD5

d2675f1f4c110402e0612b8c8915be48
SHA1

c27fd6abd5e9ec3af7ba11b614c3a5d6a0362f87
SHA256

8f6a2c5d17f924af5435f1d6c42d7af0cbf208fc0296184f1e95e79125cd6e17
SHA512

025280ba528ba1d79bed278e8aaaebb096734ad6c15df7b85f951192796e30923cb9e39a72f9c9997dc6f1e2b26c773b753eee692df8f9a6005713152e27ffe4
SSDEEP

3072:Tte2hXQLXpGufMNO4ABMAXWZjOmwbK4RRwg6FhphamPFXQb3xFJkiNmQOf9DtIr+:yXpGufMNO4ABMAXnmwRiphamPFe3x/k1

Score

7^/10

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery
T1016

Processes:

x-8.6-.INFINITY.elf

description ioc process

/proc/net/route /proc/net/route x-8.6-.INFINITY.elf
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery
T1016

Processes:

x-8.6-.INFINITY.elf

description ioc process

/proc/net/route /proc/net/route x-8.6-.INFINITY.elf

description	ioc	process
/proc/net/route	/proc/net/route	x-8.6-.INFINITY.elf

description	ioc	process
/proc/net/route	/proc/net/route	x-8.6-.INFINITY.elf

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact