98e19d804c9314bd762c7c3ab0b9b202717326381d906eaa09fea3106a21582b

Analysis

max time kernel
147s
max time network
152s
platform
ubuntu-22.04_amd64
resource
ubuntu2204-amd64-20240522.1-en
resource tags

arch:amd64arch:i386image:ubuntu2204-amd64-20240522.1-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
submitted
02/07/2024, 05:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
qkdjdjj22.i586.elf
Size 135KB
Sample240702-glw2rasgpk
SHA256 98e19d804c9314bd762c7c3ab0b9b202717326381d906eaa09fea3106a21582b
MD5 7a931e5227e5ea12ada751d31679de48
SHA1 feeaed8086b6675e7e9eb451e4ac3621f047d556
SHA512 250cc66c2a82d5cb86d60ba0d8abc5395962535c1d6c007ac250fc67e519300ffc17ba18026d0f7cc59f84da382fd7fddcaf199d673cce57ad06103e16efab7f
SSDEEP 3072:DSO1SULUeU/UrUIyUV+g3bAS4hWx9uIQd5hnZCJWimJswdytNr9:DgIXSMCbg3bih49uIW5hnZCJ/mJswdyh
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	qkdjdjj22.i586.elf

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	qkdjdjj22.i586.elf

/tmp/qkdjdjj22.i586.elf
/tmp/qkdjdjj22.i586.elf
1⤵
- Reads system routing table
- Reads system network configuration
PID:1568

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads