f1d9ebd547140157f30a10092a17e2caf05a5fd2fef0764862f27a9b0caac237

Analysis

max time kernel
40060s
max time network
150s
platform
linux_amd64
resource
ubuntu1804-amd64-en-20211208
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
17-03-2023 08:41

Target

gummy.x86.elf
Size

106KB
MD5

17a7fe2e45cc72b1b8575a70a37d069f
SHA1

d6a17685b20472dd00fb476f2ac495c8dbef9487
SHA256

f1d9ebd547140157f30a10092a17e2caf05a5fd2fef0764862f27a9b0caac237
SHA512

903ea0e6dd40e4479d33eb4c3358a62c6d544c87dde948ddc15540f835ab819bf6f72fd9b0c08380d1371d3b5be8acf2ce0c5b074ab6bac50a9043beebfdd45f
SSDEEP

3072:1Ye6WOxfGgkCLqxMnpBjd1nNF7FFI3oF9F2LNO:NCumB1nNF7FFI3oF9F2LNO

Score

7^/10

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery
T1016

Processes:

gummy.x86.elf

description ioc process

/proc/net/route /proc/net/route gummy.x86.elf
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery
T1016

Processes:

gummy.x86.elf

description ioc process

/proc/net/route /proc/net/route gummy.x86.elf

description	ioc	process
/proc/net/route	/proc/net/route	gummy.x86.elf

description	ioc	process
/proc/net/route	/proc/net/route	gummy.x86.elf

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact