cbc1dbe6395a8a57c995aef6f7222c96f7602cb33ca40b8546bafdf9ed09cb01

Analysis

max time kernel
10851s
max time network
151s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20221111-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20221111-enkernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
17-03-2023 08:35

Target

x-8.6-.Sakura.elf
Size

91KB
MD5

40d5f4909107a81c868357e8d952935a
SHA1

bce1a66d93f7c58d7b0d929ac4255cd3c0db75cc
SHA256

cbc1dbe6395a8a57c995aef6f7222c96f7602cb33ca40b8546bafdf9ed09cb01
SHA512

8164b3c1740b6fee5461558548576e78cf56d8aa750f6a79e4c3b894f47fa0ca3f84bf6f57a36dc09cae13840a06b4728c45b20d9cdd774fe7e903804d0e7e44
SSDEEP

1536:p7rHXokXsWFVSzkfLEkZAT5ipG5v3LphauH/VPNlDDUg6I9um2Xj5YZb0e:pcCPOkfQfNipGdLphaE/XVog99um2XFY

Score

7^/10

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery
T1016

Processes:

x-8.6-.Sakura.elf

description ioc process

/proc/net/route /proc/net/route x-8.6-.Sakura.elf
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery
T1016

Processes:

x-8.6-.Sakura.elf

description ioc process

/proc/net/route /proc/net/route x-8.6-.Sakura.elf

description	ioc	process
/proc/net/route	/proc/net/route	x-8.6-.Sakura.elf

description	ioc	process
/proc/net/route	/proc/net/route	x-8.6-.Sakura.elf

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact