Overview

overview

10

Static

static

10

bb1abbcffd...4a.elf

ubuntu-22.04-amd64

6

Analysis

  • max time kernel
    148s
  • max time network
    128s
  • platform
    ubuntu-22.04_amd64
  • resource
    ubuntu2204-amd64-20240611-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2204-amd64-20240611-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
  • submitted
    26-11-2024 03:17

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    bb1abbcffdc127a609fbf46fbe495e518af1f4f5aca337968d994e93056ffb4a.elf

  • Size

    118KB

  • MD5

    cf6e8607ca66041c6503b7808a5ff1ac

  • SHA1

    1ada8f7adf146b1a9b1f5b9165a407d97e61c9ba

  • SHA256

    bb1abbcffdc127a609fbf46fbe495e518af1f4f5aca337968d994e93056ffb4a

  • SHA512

    3f0871142542fafce22c0125da837dc275493a893908aed2ca12c274d1590b26fd7be6ea6d8eebd09935dadad2f9846373b3de23999f9d333841ec787c98c6e7

  • SSDEEP

    3072:xMxB5Tc9xfHxFScXc2i+TMoc6bgmom0ea7HWvP:Cxs9x/g2jL5om0eaTWvP

Score
6/10
discovery

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

    discovery
  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

    discovery

Processes

  • /tmp/bb1abbcffdc127a609fbf46fbe495e518af1f4f5aca337968d994e93056ffb4a.elf
    /tmp/bb1abbcffdc127a609fbf46fbe495e518af1f4f5aca337968d994e93056ffb4a.elf
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:1566

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads