e11ceade8f755ea49a7bd0ca0c4abf0c339e42223a22cfa8959b8f45a135a5f0

Analysis

max time kernel
149s
max time network
149s
platform
ubuntu-20.04_amd64
resource
ubuntu2004-amd64-20240221-en
resource tags

arch:amd64arch:i386image:ubuntu2004-amd64-20240221-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system
submitted
18/04/2024, 11:34

Target

SecuriteInfo.com.ELF.FastReverseProxy-D.9265.18798.elf
Size

10.3MB
MD5

336e7fc826a87a63b63b6ee895e45fb1
SHA1

6dfef837eac65e33f8e084e943ebf2ad88ec892f
SHA256

e11ceade8f755ea49a7bd0ca0c4abf0c339e42223a22cfa8959b8f45a135a5f0
SHA512

e80df73b55efddf4c8ab2c535a2a847cf853ee3464f3b4913412f4af34c8fc381b801af2224d1f0236922555c80b29d2e9bd74511a852e89d7bcc7f1d06c9332
SSDEEP

49152:nWAi2zUyo72Jw9dv2qUkFTw1irYk9+EqdLbGzyYSDH2ZXcfU/W5EmUdxPAmyUtCD:nC2zUyB0ewwuqdWzGE5Ag5fUP5jG94

Score

3^/10

Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

System Information Discovery

description	ioc	Process
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	SecuriteInfo.com.ELF.FastReverseProxy-D.9265.18798.elf

/tmp/SecuriteInfo.com.ELF.FastReverseProxy-D.9265.18798.elf
/tmp/SecuriteInfo.com.ELF.FastReverseProxy-D.9265.18798.elf
1⤵
- Enumerates kernel/hardware configuration
PID:1473

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact