Analysis

  • max time kernel
    104s
  • max time network
    131s
  • platform
    ubuntu-22.04_amd64
  • resource
    ubuntu2204-amd64-20240611-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2204-amd64-20240611-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
  • submitted
    23-11-2024 03:14

General

  • Target

    f720d27830f494caeee54dc178833970148584e03e42311e1a3a5187fca7829e.elf

  • Size

    106KB

  • MD5

    9f7ac6ec336a793d48610b4503dbcf8b

  • SHA1

    51674bec76b65e63d3e3c71569c6d66df31b6df1

  • SHA256

    f720d27830f494caeee54dc178833970148584e03e42311e1a3a5187fca7829e

  • SHA512

    d29a0cfe2fb8f63ce64fab4348f05d7d1b0c631b0ff2e108868db3c6c7e8359d73b992d5b5652534c54223e120ad0d1203003511b1ca90dd30f32b24c2c6620f

  • SSDEEP

    3072:j6dye4BmJQ6phaZw/1vc4MAzkSXmdRWaLHgb4:d6phaZcvrmdRWaDgb4

Score
6/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/f720d27830f494caeee54dc178833970148584e03e42311e1a3a5187fca7829e.elf
    /tmp/f720d27830f494caeee54dc178833970148584e03e42311e1a3a5187fca7829e.elf
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:1587

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads