a93a7b49c5f43630433b45f68d779f05917502461fbf6d4666e036991b0b9142

Analysis

max time kernel
149s
max time network
152s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240611-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240611-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
10-12-2024 12:27

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

i--6.-.86.elf
Size

107KB
MD5

c47fee0c2f5f4c80645db85b8988b503
SHA1

ddc02a945909c3b8ab3f3128c464759807c11019
SHA256

a93a7b49c5f43630433b45f68d779f05917502461fbf6d4666e036991b0b9142
SHA512

ddd29270086df2f6cf5cca65beffddb5b262887ce342017be090b2d3b027cc07c30079c99d603db89e0a0212f09776b77c54f3372480e85dd2eef14948c35f97
SSDEEP

1536:yp3b7kAYhytxsEdxL87gWuFXwaDQ5/2cjOAm5Ro1LM7YzuA:urIA3tSYxLCFeXwacbjOAm3o1o7YzuA

Score

6^/10

discovery

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	i--6.-.86.elf

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	i--6.-.86.elf

/tmp/i--6.-.86.elf
/tmp/i--6.-.86.elf
1⤵
- Reads system routing table
- Reads system network configuration
PID:1500

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads