043e6c37078a24861d9d886df3398c8a930da701a3f13d1a65acba3adb3ba92b

Analysis

max time kernel
140s
max time network
150s
platform
ubuntu-22.04_amd64
resource
ubuntu2204-amd64-20240611-en
resource tags

arch:amd64arch:i386image:ubuntu2204-amd64-20240611-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
submitted
07-12-2024 02:04

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

043e6c37078a24861d9d886df3398c8a930da701a3f13d1a65acba3adb3ba92b.elf
Size

78KB
MD5

c39eb100d7867ca81882390ac31f277c
SHA1

5e9775cb88f9278604e5f6ae7bbc7f638f325562
SHA256

043e6c37078a24861d9d886df3398c8a930da701a3f13d1a65acba3adb3ba92b
SHA512

77afe996fc627a52d47c193b1684ece162267f60cf788d3701f85e257968234335913eb487f08e5bd2c8bc5aca16cf8e19c79c4cbf21c78b7aa3822a4a414527
SSDEEP

1536:x39YCcP0zWbAtWb4WomRV7Ut31gaBlBir81Je53:dmrP0GAtz7q6lY81M3

Score

6^/10

discovery

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	043e6c37078a24861d9d886df3398c8a930da701a3f13d1a65acba3adb3ba92b.elf

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	043e6c37078a24861d9d886df3398c8a930da701a3f13d1a65acba3adb3ba92b.elf

/tmp/043e6c37078a24861d9d886df3398c8a930da701a3f13d1a65acba3adb3ba92b.elf
/tmp/043e6c37078a24861d9d886df3398c8a930da701a3f13d1a65acba3adb3ba92b.elf
1⤵
- Reads system routing table
- Reads system network configuration
PID:1596

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads