c7b3d3da745510a14e3cc3ea75328b5bd948e1bd1b7d629c8fb348ace00af2fe

Analysis

max time kernel
154s
max time network
132s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20231213-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20231213-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
14/12/2023, 09:39

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

91b50ee1a3db09b852550aa7e52686be.elf
Size

250B
MD5

91b50ee1a3db09b852550aa7e52686be
SHA1

2a6d039044f9f5ce528d0831f0f4ad679b1fd14f
SHA256

c7b3d3da745510a14e3cc3ea75328b5bd948e1bd1b7d629c8fb348ace00af2fe
SHA512

ebd43923560c3dbf949da80ba5b90f08c64776f5480c7042bebb4975c1a03c1f0d4be732c3a0195acafe9388672dc9411d28ac74dc8e969337d9e2dfdaf5c6a1

Score

6^/10

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	91b50ee1a3db09b852550aa7e52686be.elf

Reads system network configuration 1 TTPs 4 IoCs

Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	91b50ee1a3db09b852550aa7e52686be.elf
File opened for reading	/proc/net/ipv6_route	91b50ee1a3db09b852550aa7e52686be.elf
File opened for reading	/proc/net/dev	91b50ee1a3db09b852550aa7e52686be.elf
File opened for reading	/proc/net/if_inet6	91b50ee1a3db09b852550aa7e52686be.elf

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/stat	91b50ee1a3db09b852550aa7e52686be.elf

/tmp/91b50ee1a3db09b852550aa7e52686be.elf
/tmp/91b50ee1a3db09b852550aa7e52686be.elf
1⤵
- Reads system routing table
- Reads system network configuration
- Reads runtime system information
PID:1578

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads