Overview

overview

7

Static

static

7

298e32e4fe...8e.elf

ubuntu-18.04-amd64

6

Analysis

  • max time kernel
    144s
  • max time network
    157s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20231215-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20231215-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    12/02/2024, 03:43

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    298e32e4fe64f5bec9ad79ee7ee89ea73df721805df852db7f85973c457c658e.elf

  • Size

    56KB

  • MD5

    597392f115a74f62b4e3685bc8243619

  • SHA1

    4a5396b09d16cae64ef192f3e4432c2d18c592fe

  • SHA256

    298e32e4fe64f5bec9ad79ee7ee89ea73df721805df852db7f85973c457c658e

  • SHA512

    602272d902145af0da51af031a1a4da41c1a5db4a1405ac739d08295d53dc7f3f7bd4e6e97b5675cb192c564dc9eb117472807bae3feb2b2ce73b8d491f6a031

  • SSDEEP

    768:xa2XSd2SIrj/3WbUvpCsfi8wmfwYJWZTwhVxiRjAqx/J+Mhx0+fNOiCXaRHF55i/:A2SIPqURCt2WQO8gUjK/uAy7N

Score
6/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/298e32e4fe64f5bec9ad79ee7ee89ea73df721805df852db7f85973c457c658e.elf
    /tmp/298e32e4fe64f5bec9ad79ee7ee89ea73df721805df852db7f85973c457c658e.elf
    1⤵
    • Reads system routing table
    • Reads system network configuration
    • Writes file to tmp directory
    PID:1521

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /tmp/Infected.log
          Filesize

          107B

          MD5

          a70a5dde6f79eaea4e71c88b6a2ccc38

          SHA1

          92c0273c4be5d4b7bdbdd500de5a64e5e05652b2

          SHA256

          d087a5a10a09b589993d8cc44a24ef22db26ffd0feeeb3f29b15af008c292af8

          SHA512

          aaa7d00faa34a87292f23a16dae8a7a4b5a40c8e375a579f1286427819c2a04e1c6f970dbc0f2433e6c03f59a2ece0f28ba1e8fc526bc4afe77f176f61876c52

          Download Submit