64e043de2461ba718aac43ec7e579e34190a76ae563bcdbc2e4fdc04a84b6219

Analysis

max time kernel
0s
max time network
153s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20221111-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20221111-enkernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
21-03-2023 01:25

Target

08e3a4fd6260dab4de45fe1da2301c52ae8f7ec9cf02f755e54a666d745c4d59.elf
Size

80KB
MD5

5eac949ea218159d57e391a03e8e20e3
SHA1

8cc754e75838ab44e6d1a82ccba0e95a6446f8cf
SHA256

08e3a4fd6260dab4de45fe1da2301c52ae8f7ec9cf02f755e54a666d745c4d59
SHA512

8034268ea3b503bea953bc0da001c17c7dd3c14b3c9b97d109f1d7cbc100b6e533d67f7c6b5d605ea543e1b54a4174f5bc9a8eb883cbcb3f3c5f93eacb7f03d3
SSDEEP

1536:A74X+IUTRuGwiwp4eRPgCpR3apWU4aa3S3CTVeJxYmoImu9GjDD2Yre:WaUTIvtRP3fCfa3OCTVeJxYmrmu9G3Du

Score

7^/10

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery
T1016

Processes:

08e3a4fd6260dab4de45fe1da2301c52ae8f7ec9cf02f755e54a666d745c4d59.elf

description ioc process

/proc/net/route /proc/net/route 08e3a4fd6260dab4de45fe1da2301c52ae8f7ec9cf02f755e54a666d745c4d59.elf
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery
T1016

Processes:

08e3a4fd6260dab4de45fe1da2301c52ae8f7ec9cf02f755e54a666d745c4d59.elf

description ioc process

/proc/net/route /proc/net/route 08e3a4fd6260dab4de45fe1da2301c52ae8f7ec9cf02f755e54a666d745c4d59.elf

description	ioc	process
/proc/net/route	/proc/net/route	08e3a4fd6260dab4de45fe1da2301c52ae8f7ec9cf02f755e54a666d745c4d59.elf

description	ioc	process
/proc/net/route	/proc/net/route	08e3a4fd6260dab4de45fe1da2301c52ae8f7ec9cf02f755e54a666d745c4d59.elf

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact