Analysis
-
max time kernel
136s -
max time network
139s -
platform
ubuntu-20.04_amd64 -
resource
ubuntu2004-amd64-20240508-en -
resource tags
arch:amd64arch:i386image:ubuntu2004-amd64-20240508-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system -
submitted
17/05/2024, 15:06
Behavioral task
behavioral1
Sample
x-8.6-.ISIS.elf
Resource
ubuntu2004-amd64-20240508-en
2 signatures
150 seconds
General
-
Target
x-8.6-.ISIS.elf
-
Size
112KB
-
MD5
1c4a4a4d0611ebfefa76d6c7bb85c3bf
-
SHA1
35174c728126789d687f5aecc1dd0dd815dadc4e
-
SHA256
d1366c7188d88b86849d6f699bad4f7eb262a543d21e15dad1543559dcb16779
-
SHA512
5480c6473b0d790e72e2870eaff7798c33ddc6c2073e0e2abcd5a4fffbc8537557fdfe8583a4abedaa1d78dc6e38c33373c1bebd498961f2009f26a2b0f06d07
-
SSDEEP
3072:I1Us+1yGIqOYzx4EX089gKwlKhzVrm0mlTcyH7od:5r48WkmlTc47od
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route x-8.6-.ISIS.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route x-8.6-.ISIS.elf