Analysis

  • max time kernel
    140s
  • max time network
    148s
  • platform
    ubuntu-20.04_amd64
  • resource
    ubuntu2004-amd64-20240221-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2004-amd64-20240221-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system
  • submitted
    23/04/2024, 01:59

General

  • Target

    d85483d7baa93567e66160268d77f2971f8a923f60fafa311214c0bfea71d6e2.elf

  • Size

    85KB

  • MD5

    92734907209050c876a1394d26fd5a6c

  • SHA1

    7a1df979212e98f4fa92f9a06ad7c39eddbff9af

  • SHA256

    d85483d7baa93567e66160268d77f2971f8a923f60fafa311214c0bfea71d6e2

  • SHA512

    bc833b0d0f7aa064a47f3c0d57d2ce7cc76f832c69693bd3422f5a3f6471ca15b6fba88e0e3336a6538dcb31525921c7d954767588085e5c47a0f99be0a169f1

  • SSDEEP

    1536:z+QctUQUnvVdkp1zq7DZp8yU8eueA9BCTFl3V99KmTMbSXmQTse6MCYka9:z+QctUQUnvV/7DLU8eu9Bk3V99Klb6mu

Score
6/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/d85483d7baa93567e66160268d77f2971f8a923f60fafa311214c0bfea71d6e2.elf
    /tmp/d85483d7baa93567e66160268d77f2971f8a923f60fafa311214c0bfea71d6e2.elf
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:1488

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads