84ca68ae9cbc94d95fbff735c021ef402af234129cfc013fc18bd78e2427ae6f

Analysis

max time kernel
149s
max time network
153s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
10-12-2024 12:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

x.8-.-6.-.elf
Size

119KB
MD5

db63cd7318e423908e8b55c7e4d4cb86
SHA1

e6575d4f83dcd59c717002e8abe3fe1a3e4107e2
SHA256

84ca68ae9cbc94d95fbff735c021ef402af234129cfc013fc18bd78e2427ae6f
SHA512

9830c7200bc05cf29e59f43998ac12975595b56d8b5a1e760976cbf6ef0237f189a5af89ce1dca05400cd5e1bb90229b9027a3b27e45097e509d344e36a05cdc
SSDEEP

3072:xfOacTDvzz7PAdRSdXNJqdTgmwbfKHmYn:8UUIdTgmwbfwmYn

Score

6^/10

discovery

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	x.8-.-6.-.elf

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	x.8-.-6.-.elf

/tmp/x.8-.-6.-.elf
/tmp/x.8-.-6.-.elf
1⤵
- Reads system routing table
- Reads system network configuration
PID:2825

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads