dc30e6500ebcf937a237d027acdd40c2dd68741b4f40a9523196ee82eb13e3c3

Analysis

max time kernel
38224s
max time network
126s
platform
linux_amd64
resource
ubuntu1804-amd64-en-20211208
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
24-02-2023 02:36

Target

83510ad1397bd08f248bbee8464e124c
Size

83KB
MD5

83510ad1397bd08f248bbee8464e124c
SHA1

dd3e41549f10f895c188bc33667a8f2f332f8c0b
SHA256

dc30e6500ebcf937a237d027acdd40c2dd68741b4f40a9523196ee82eb13e3c3
SHA512

c39f782cb65a5b393820af411faab6f4bc38afb3c455dd066261c5eda6680de922d2184a75aaeb9487253f6b8cd3c6e498d9bdcee4a040cad05401eb3d1824fc
SSDEEP

1536:eB7cH1LhKlBqIKVhuzdPQq0aJP9sWtjG7ew3nILWODPPmoIYuOVje+ZNne:eRMhKlcluzdPv0o+QK7eknIL1DHmrYur

Score

7^/10

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery
T1016

Processes:

83510ad1397bd08f248bbee8464e124c

description ioc process

/proc/net/route /proc/net/route 83510ad1397bd08f248bbee8464e124c
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery
T1016

Processes:

83510ad1397bd08f248bbee8464e124c

description ioc process

/proc/net/route /proc/net/route 83510ad1397bd08f248bbee8464e124c

description	ioc	process
/proc/net/route	/proc/net/route	83510ad1397bd08f248bbee8464e124c

description	ioc	process
/proc/net/route	/proc/net/route	83510ad1397bd08f248bbee8464e124c

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact