e5f0827ec098a78ab74ca7fa6b129330acaed4e2fa005d0c3a590f6d479d5e4a

Analysis

max time kernel
148s
max time network
131s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240611-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240611-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
09-12-2024 10:55

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

pXdN91.x68.elf
Size

118KB
MD5

a40eb9d6b26d3a809958741610892112
SHA1

b6fd7c54e8805e6e9c74f9557bcf3c7750c5386a
SHA256

e5f0827ec098a78ab74ca7fa6b129330acaed4e2fa005d0c3a590f6d479d5e4a
SHA512

c1e6be1af8773d1723a1e33c1e84322c6985e6bb7ac046bf09bf7e369854cc75fff05613e2922e061ef0b75de1097ab9335d6e1083f80829f88323ca2722b584
SSDEEP

3072:xMxB5Tc9xfHxFScXcki+TMoc6Qgmom0ea7HWvP:Cxs9x/gkjLGom0eaTWvP

Score

6^/10

discovery

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	pXdN91.x68.elf

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	pXdN91.x68.elf

/tmp/pXdN91.x68.elf
/tmp/pXdN91.x68.elf
1⤵
- Reads system routing table
- Reads system network configuration
PID:1478

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads