c34149e0998cb5b0406dc02b120d10aa1ba5f4c333fced32f29fbb868b27a9d7

Analysis

max time kernel
127s
max time network
133s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20231215-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20231215-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
11/01/2024, 17:44

Target

c34149e0998cb5b0406dc02b120d10aa1ba5f4c333fced32f29fbb868b27a9d7elf.elf
Size

13.5MB
MD5

86d90ff166cec836141372ca8ac199a0
SHA1

47774a0bf3391ad1729cb139232d00432a6c20e2
SHA256

c34149e0998cb5b0406dc02b120d10aa1ba5f4c333fced32f29fbb868b27a9d7
SHA512

8ff215dd9dc0d45e092639dcf5515125808e2cae00b4404e71a7997b3dfd34bf048078fafef8016b29d7ec0f1a4276a0da1a951329148801f51394e00fbbe577
SSDEEP

98304:/df5jWyWBnWyM/eG3AJ8+UOH2DuGgd1EpGc3d+ESW:/dhjROJ87OWKGgdGpGi+EL

Score

3^/10

Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

System Information Discovery

description	ioc	Process
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	c34149e0998cb5b0406dc02b120d10aa1ba5f4c333fced32f29fbb868b27a9d7elf.elf

/tmp/c34149e0998cb5b0406dc02b120d10aa1ba5f4c333fced32f29fbb868b27a9d7elf.elf
/tmp/c34149e0998cb5b0406dc02b120d10aa1ba5f4c333fced32f29fbb868b27a9d7elf.elf
1⤵
- Enumerates kernel/hardware configuration
PID:1528

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact