1da5373a9a1badc39acd477607f58f7046430e7cc9894b16a219126b9c4c1c49

Analysis

max time kernel
40614s
max time network
122s
platform
linux_amd64
resource
ubuntu1804-amd64-en-20211208
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
23-03-2023 18:29

Target

x-8.6-.SNOOPY.elf
Size

83KB
MD5

ce98a710b21354c5402e0fbd208fc58e
SHA1

0100ec11195062f992d497fa212254aa811095b8
SHA256

1da5373a9a1badc39acd477607f58f7046430e7cc9894b16a219126b9c4c1c49
SHA512

361465dce8d0160d005302f0cc804bb44555efae1fceaf6cb7deee8252f0335d2ec5cb9b1774250f899a42ca97afd16b9bd00bb6607472967f88f7e744864ede
SSDEEP

1536:UB7crF7FePF5tZuEqdPUq0aJb9sqx3CjrM3XYuWIr8UmoIYuOVje+ZNne:URQFet5O7dPr0oSwyjr4XYuDnmrYuOVA

Score

7^/10

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery
T1016

Processes:

x-8.6-.SNOOPY.elf

description ioc process

/proc/net/route /proc/net/route x-8.6-.SNOOPY.elf
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery
T1016

Processes:

x-8.6-.SNOOPY.elf

description ioc process

/proc/net/route /proc/net/route x-8.6-.SNOOPY.elf

description	ioc	process
/proc/net/route	/proc/net/route	x-8.6-.SNOOPY.elf

description	ioc	process
/proc/net/route	/proc/net/route	x-8.6-.SNOOPY.elf

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact