General

  • Target

    Demon.x86.elf

  • Size

    83KB

  • Sample

    230317-kfvtaahb8y

  • MD5

    bb5969a09c19af8d3169f7d8f7948111

  • SHA1

    2a84eb89160e24d5aa0020592802e893aeccf1cc

  • SHA256

    1ef200cefbefc1d51d5d30c24cdf94b4beb8bbd7b8d303ed1e180a2baa502348

  • SHA512

    43f5017bef91b0ddcd9fbf729e022fb3ae2f855c79ea80997fcb172740e2e7b7e047be84803149da3bc0d7134dd7d033c3281ba76e7238963720d105c057803f

  • SSDEEP

    1536:B74oud+AJrSbKhakxnkc6yw83lJ1F2y2qDRMfdmw+ZWOT42oF54S:Rg+AJrSEtkc6yBlJay3odmvZWOT9oF5L

Score
10/10

Malware Config

Targets

    • Target

      Demon.x86.elf

    • Size

      83KB

    • MD5

      bb5969a09c19af8d3169f7d8f7948111

    • SHA1

      2a84eb89160e24d5aa0020592802e893aeccf1cc

    • SHA256

      1ef200cefbefc1d51d5d30c24cdf94b4beb8bbd7b8d303ed1e180a2baa502348

    • SHA512

      43f5017bef91b0ddcd9fbf729e022fb3ae2f855c79ea80997fcb172740e2e7b7e047be84803149da3bc0d7134dd7d033c3281ba76e7238963720d105c057803f

    • SSDEEP

      1536:B74oud+AJrSbKhakxnkc6yw83lJ1F2y2qDRMfdmw+ZWOT42oF54S:Rg+AJrSEtkc6yBlJay3odmvZWOT9oF5L

    Score
    7/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

MITRE ATT&CK Enterprise v6

Tasks