1ef200cefbefc1d51d5d30c24cdf94b4beb8bbd7b8d303ed1e180a2baa502348

Analysis

max time kernel
40060s
max time network
147s
platform
linux_amd64
resource
ubuntu1804-amd64-en-20211208
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
17-03-2023 08:33

Target

Demon.x86.elf
Size

83KB
MD5

bb5969a09c19af8d3169f7d8f7948111
SHA1

2a84eb89160e24d5aa0020592802e893aeccf1cc
SHA256

1ef200cefbefc1d51d5d30c24cdf94b4beb8bbd7b8d303ed1e180a2baa502348
SHA512

43f5017bef91b0ddcd9fbf729e022fb3ae2f855c79ea80997fcb172740e2e7b7e047be84803149da3bc0d7134dd7d033c3281ba76e7238963720d105c057803f
SSDEEP

1536:B74oud+AJrSbKhakxnkc6yw83lJ1F2y2qDRMfdmw+ZWOT42oF54S:Rg+AJrSEtkc6yBlJay3odmvZWOT9oF5L

Score

7^/10

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery
T1016

Processes:

Demon.x86.elf

description ioc process

/proc/net/route /proc/net/route Demon.x86.elf
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery
T1016

Processes:

Demon.x86.elf

description ioc process

/proc/net/route /proc/net/route Demon.x86.elf

description	ioc	process
/proc/net/route	/proc/net/route	Demon.x86.elf

description	ioc	process
/proc/net/route	/proc/net/route	Demon.x86.elf

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact