Overview

overview

10

Static

static

10

82415e8838...d3.elf

ubuntu-18.04-amd64

7

Analysis

  • max time kernel
    11275s
  • max time network
    136s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20221111-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20221111-enkernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    22-03-2023 06:19

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    82415e8838d0e36c3e60d300dc1f9fd3.elf

  • Size

    100KB

  • MD5

    82415e8838d0e36c3e60d300dc1f9fd3

  • SHA1

    8aabdf5e7d068d40797af6698ad293014010bc07

  • SHA256

    c12bc6a7b13591a732b61146d00bc1cb483d7ae95df007cddc0112ab835339d7

  • SHA512

    0a137711077d549464c5968978c1e7a941e09fae86c4a909a1f81e30397d6b773f7abc03a2841a9a60784a6962a9d5efe6a8b2357caf05a7b307e5a98862e896

  • SSDEEP

    3072:QBpHuN9/36Z+pjtwiCphagC1yg9luJ2hgYZiSb:EpHs/3hgphagC1yg9luJ2hgYZiSb

Score
7/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/82415e8838d0e36c3e60d300dc1f9fd3.elf
    /tmp/82415e8838d0e36c3e60d300dc1f9fd3.elf
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:617

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

2
T1016

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Replay Monitor

Loading Replay Monitor...

Downloads