dbd864147c9adf7522c49647d962cd8532383651f14d5e729a7754d7e6ccf517

Analysis

max time kernel
0s
max time network
100s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20221111-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20221111-enkernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
18-03-2023 00:10

Target

0f30f9075e6520891f50d1a15a0f49a1.elf
Size

90KB
MD5

0f30f9075e6520891f50d1a15a0f49a1
SHA1

472cc2b4f051519154492608a6931719273359bd
SHA256

dbd864147c9adf7522c49647d962cd8532383651f14d5e729a7754d7e6ccf517
SHA512

e20b91b50b169630c7b69988ee4aed1f2d52b35bdc675bd9bd93b788e355b6de1b0a4c86091168e659cb9695873bf4f600bde4d9d2e64454f9057b17cbfe2fc8
SSDEEP

1536:W7WREyqkQc923v2uNi7pNF+BoD3nphanvn00JFmoI5um2Xj5YZA0e:4RkQT3v9EbYBo7nphanvn00bmr5um2Xx

Score

7^/10

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery
T1016

Processes:

0f30f9075e6520891f50d1a15a0f49a1.elf

description ioc process

/proc/net/route /proc/net/route 0f30f9075e6520891f50d1a15a0f49a1.elf
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery
T1016

Processes:

0f30f9075e6520891f50d1a15a0f49a1.elf

description ioc process

/proc/net/route /proc/net/route 0f30f9075e6520891f50d1a15a0f49a1.elf

description	ioc	process
/proc/net/route	/proc/net/route	0f30f9075e6520891f50d1a15a0f49a1.elf

description	ioc	process
/proc/net/route	/proc/net/route	0f30f9075e6520891f50d1a15a0f49a1.elf

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact