Analysis

  • max time kernel
    113s
  • max time network
    129s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20240418-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20240418-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    30/04/2024, 01:07

General

  • Target

    66b79fcfb763dc11d03de8a1da3e50f9871be1d1e64e805c7dc14e987e4150f2.elf

  • Size

    139KB

  • MD5

    28558da23525f76914895bf4497995e6

  • SHA1

    ecb9cd23123716fc0c903930b57c77744a2aced5

  • SHA256

    66b79fcfb763dc11d03de8a1da3e50f9871be1d1e64e805c7dc14e987e4150f2

  • SHA512

    d1bc353306b4e4e6bec2c35abe105fca558a17ffba3cd34a3dc4227ccb3899a5cbbb2227903f86a1e448cd2a8fe275e22137ef633cbd05a719a58af290dba0fa

  • SSDEEP

    3072:yclx0/BSuUiFZPSwwSOyMzm5h6NJeX0mJswdytNr9:y3zbPGzm5hU7mJswdytNr9

Score
6/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/66b79fcfb763dc11d03de8a1da3e50f9871be1d1e64e805c7dc14e987e4150f2.elf
    /tmp/66b79fcfb763dc11d03de8a1da3e50f9871be1d1e64e805c7dc14e987e4150f2.elf
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:1527

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads