Analysis

  • max time kernel
    115s
  • max time network
    130s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20231026-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20231026-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    01/11/2023, 01:27

General

  • Target

    5945604da54c7b80c94c454b13518ba23a4f7a6533522eb4b225529af6bd4e1f.elf

  • Size

    97KB

  • MD5

    551ed083bf5e24e24b1a432ab5616acb

  • SHA1

    fdf15476f4b25ffcf25c4eb0d58b8b617bce8af2

  • SHA256

    5945604da54c7b80c94c454b13518ba23a4f7a6533522eb4b225529af6bd4e1f

  • SHA512

    1199dcbd910b41318506e2ed6305933d6ffd174fe3082a8ba3748cf509e0c658b603c736e413586dfdf955b528d296f38ba97b5f48043c5d08f1789cf48cb60e

  • SSDEEP

    3072:2K5ejA4jB4h89HOPQzM9FqVyA9W9vmrYuOHy+ZNzX:sHjBzuPQQqk9vmrYuOHy+ZNzX

Score
6/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/5945604da54c7b80c94c454b13518ba23a4f7a6533522eb4b225529af6bd4e1f.elf
    /tmp/5945604da54c7b80c94c454b13518ba23a4f7a6533522eb4b225529af6bd4e1f.elf
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:1537

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads