327baca96bc6775c0a757af2e175554a7edb2162d451a020df5bcb60ae8e350e

Analysis

max time kernel
111s
max time network
113s
platform
linux_amd64
resource
ubuntu1804-amd64-en-20211208
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
21/05/2023, 15:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

81d6b2fa373ce55146a6e51ca0b9c8fc.elf
Size

85KB
MD5

81d6b2fa373ce55146a6e51ca0b9c8fc
SHA1

084989e27829a6e81b55c1bacd0a5cc8c9ae478f
SHA256

327baca96bc6775c0a757af2e175554a7edb2162d451a020df5bcb60ae8e350e
SHA512

5efa9a4ea9e582ee3ba1365cf0cd25edd09c64b1eb818d6026710b20bd68e293e418287db3b58c915be483deb7161460002191b72be4c29a20cc9095b12a32c3
SSDEEP

1536:L3oLQ5TCzSVYERb1aGy8gwi5veMbBZzp6+m5CsNFPVYLf0:D8Q5Tv+U5aH8VkWMfp7mwsN1VYLf0

Score

6^/10

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	81d6b2fa373ce55146a6e51ca0b9c8fc.elf

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	81d6b2fa373ce55146a6e51ca0b9c8fc.elf

/tmp/81d6b2fa373ce55146a6e51ca0b9c8fc.elf
/tmp/81d6b2fa373ce55146a6e51ca0b9c8fc.elf
1⤵
- Reads system routing table
- Reads system network configuration
PID:575

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads