1c849adcccad4643303297fb66bfe81c5536be39a87601d67664af1d14e02b9e

Analysis

max time kernel
2s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20221111-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20221111-enkernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
03-05-2023 22:10

Target

1c849adcccad4643303297fb66bfe81c5536be39a87601d67664af1d14e02b9e.elf
Size

2.5MB
MD5

9656cd12e3a85b869ad90a0528ca026e
SHA1

861793c4e0d4a92844994b640cc6bc3e20944a73
SHA256

1c849adcccad4643303297fb66bfe81c5536be39a87601d67664af1d14e02b9e
SHA512

ecc051f715c03ae9fc6ea97b4aa78d114cae3073962b367c23e72d911cac6db9c2e62ff11d7a0e7847f5e1e17301ba7837efe1fad9ecde0e2a7d45d26bece194
SSDEEP

49152:bNyuNSG50kEZGvKe0xeyjL8ZdLE1vgqRj2lwKGBIU6ijCV/89FL/5gNpR1aPj:bVQG50kEPe0xeyjQf4vgqROwKX+qm2NS

Score

6^/10

Reads CPU attributes 1 TTPs 1 IoCs

System Information Discovery
T1082

Processes:

1c849adcccad4643303297fb66bfe81c5536be39a87601d67664af1d14e02b9e.elf

description ioc process

File opened for reading /sys/devices/system/cpu/online 1c849adcccad4643303297fb66bfe81c5536be39a87601d67664af1d14e02b9e.elf

description	ioc	process
File opened for reading	/sys/devices/system/cpu/online	1c849adcccad4643303297fb66bfe81c5536be39a87601d67664af1d14e02b9e.elf

/tmp/1c849adcccad4643303297fb66bfe81c5536be39a87601d67664af1d14e02b9e.elf
/tmp/1c849adcccad4643303297fb66bfe81c5536be39a87601d67664af1d14e02b9e.elf
1⤵
- Reads CPU attributes
PID:598

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact