f7a2abbfd146528c5de8cd1986581d0e163a802820d76b927d22cbb8e9f492c9

Analysis

max time kernel
0s
max time network
102s
platform
linux_amd64
resource
ubuntu1804-amd64-en-20211208
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
04-03-2023 18:50

Target

fuckjewishpeople.x86.elf
Size

91KB
MD5

e801001ad8bd519faca490173a5a1502
SHA1

281454b4eaa324899f2f27271db3b91f94a1d689
SHA256

f7a2abbfd146528c5de8cd1986581d0e163a802820d76b927d22cbb8e9f492c9
SHA512

7a030dc503628b2ceea82df311894e4191ef072cbd577d5f488f14da1b64427135819ddf74e67cedf4d1f86d91e60d3f49f29be68b1edc50bc0081cb5665f792
SSDEEP

1536:p7rHXokXsWFVSzkfLEkZAT5ipG5v3HphauH/VPNlDDUg6I9um2Xj5YZb0e:pcCPOkfQfNipGdHphaE/XVog99um2XFY

Score

7^/10

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery
T1016

Processes:

fuckjewishpeople.x86.elf

description ioc process

/proc/net/route /proc/net/route fuckjewishpeople.x86.elf
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery
T1016

Processes:

fuckjewishpeople.x86.elf

description ioc process

/proc/net/route /proc/net/route fuckjewishpeople.x86.elf

description	ioc	process
/proc/net/route	/proc/net/route	fuckjewishpeople.x86.elf

description	ioc	process
/proc/net/route	/proc/net/route	fuckjewishpeople.x86.elf

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact