65cd70260cd138f4964502d984a9e56994dd838a65f6e8b19bee3cb88fae5ac1

Analysis

max time kernel
40058s
max time network
153s
platform
linux_amd64
resource
ubuntu1804-amd64-en-20211208
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
17-03-2023 08:02

Target

cfa4a11b0d522b95a6abfbaae9b98a60a5db7d276a515635876f1076b9d74425.elf
Size

91KB
MD5

d47a3eeda787a4c35dd4bafc3be727d4
SHA1

b7e5561e6f361dfe2e42202a913e5cecc6956eab
SHA256

cfa4a11b0d522b95a6abfbaae9b98a60a5db7d276a515635876f1076b9d74425
SHA512

a2ebec73329fb9351e53c8d2abffb3c5b683738d448bab63929649238ec479e897aa15d0a4c83fc0965223ba8fd419db7e8a38961370f2c0091a6af6172408dc
SSDEEP

1536:p7rHXokXsWFVSzkfLEkZAT5ipG5v3QphauH/SPNlDDUg6I9um2Xj5YZb0e:pcCPOkfQfNipGdQphaE/AVog99um2XFY

Score

7^/10

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery
T1016

Processes:

cfa4a11b0d522b95a6abfbaae9b98a60a5db7d276a515635876f1076b9d74425.elf

description ioc process

/proc/net/route /proc/net/route cfa4a11b0d522b95a6abfbaae9b98a60a5db7d276a515635876f1076b9d74425.elf
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery
T1016

Processes:

cfa4a11b0d522b95a6abfbaae9b98a60a5db7d276a515635876f1076b9d74425.elf

description ioc process

/proc/net/route /proc/net/route cfa4a11b0d522b95a6abfbaae9b98a60a5db7d276a515635876f1076b9d74425.elf

description	ioc	process
/proc/net/route	/proc/net/route	cfa4a11b0d522b95a6abfbaae9b98a60a5db7d276a515635876f1076b9d74425.elf

description	ioc	process
/proc/net/route	/proc/net/route	cfa4a11b0d522b95a6abfbaae9b98a60a5db7d276a515635876f1076b9d74425.elf

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact