a9a3bdcb992f93fe7edd2f8a0f9c90a7fa807ffb0190b06cab91b2674363d42c

Analysis

max time kernel
145s
max time network
146s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240729-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240729-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
13-11-2024 12:07

Target

x-8.6-.ISIS.elf
Size

97KB
MD5

e79e76631968be43cf361b72568fc041
SHA1

2b7bd128bd1feeda94bb49697832c6a97725dcd0
SHA256

a9a3bdcb992f93fe7edd2f8a0f9c90a7fa807ffb0190b06cab91b2674363d42c
SHA512

26da0800dede2b10a49fb099c7dfa2bdcbe6731a6861ee6610506832e9500a56ca5b4e32cd64a9319251754d26ad7908552ebb87f004d27eeca6b2b0c6fb1aab
SSDEEP

3072:2K5ejA4jB4h89HOPQzM9FqVy19W9vmrYuOHy+ZNzX:sHjBzuPQQvk9vmrYuOHy+ZNzX

Score

6^/10

discovery

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
discovery

Internet Connection Discovery
T1016.001

Processes:

x-8.6-.ISIS.elf

description ioc process

File opened for reading /proc/net/route x-8.6-.ISIS.elf
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
discovery

Internet Connection Discovery
T1016.001

Processes:

x-8.6-.ISIS.elf

description ioc process

File opened for reading /proc/net/route x-8.6-.ISIS.elf

description	ioc	process
File opened for reading	/proc/net/route	x-8.6-.ISIS.elf

description	ioc	process
File opened for reading	/proc/net/route	x-8.6-.ISIS.elf

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact