d11943f39ae7660270eb1f3ea1b2dcca988d5ea0604d141e1a4e59e8a806b881

Analysis

max time kernel
149s
max time network
153s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240611-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240611-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
13-11-2024 12:07

Target

x-3.2-.ISIS.elf
Size

84KB
MD5

06fab2d0f3e3b32090d1284e39d37259
SHA1

8c656deb42674b19e4ee9b663100f296ece29b79
SHA256

d11943f39ae7660270eb1f3ea1b2dcca988d5ea0604d141e1a4e59e8a806b881
SHA512

df0631e001ca436de7e069fdaa17004e2a9bc20540e4067cb52699fada7a2514fb0925722d7f3feef2f9181ffe35c90faf641d07b3e9e9506d652a5fe21884af
SSDEEP

1536:sQmab6bXPm8VjWWHT0im5t3ItTShKW6GLdUF5MI5AtpgwcUOGHfV+mLI2VOYjXUd:Oab6bXPm8VjWWHT0B5t4tcnBUF5MI5d9

Score

6^/10

discovery

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
discovery

Internet Connection Discovery
T1016.001

Processes:

x-3.2-.ISIS.elf

description ioc process

File opened for reading /proc/net/route x-3.2-.ISIS.elf
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
discovery

Internet Connection Discovery
T1016.001

Processes:

x-3.2-.ISIS.elf

description ioc process

File opened for reading /proc/net/route x-3.2-.ISIS.elf

description	ioc	process
File opened for reading	/proc/net/route	x-3.2-.ISIS.elf

description	ioc	process
File opened for reading	/proc/net/route	x-3.2-.ISIS.elf

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact