156edf45324bb8e7141715e11352541e665b27473700b031fa4ff66d2ce8f922

Analysis

max time kernel
146s
max time network
148s
platform
ubuntu-22.04_amd64
resource
ubuntu2204-amd64-20240522.1-en
resource tags

arch:amd64arch:i386image:ubuntu2204-amd64-20240522.1-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
submitted
12-12-2024 05:41

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

x32.xxx.elf
Size

94KB
MD5

49b5fedfb0c4037337f5fa6c9a1d04af
SHA1

6e6c832b33242845b2f62c69214539b8b815838d
SHA256

156edf45324bb8e7141715e11352541e665b27473700b031fa4ff66d2ce8f922
SHA512

5a51a712ae4b019da6373f22554d037cba520293199a39e4255b89c91c79cb2e2a17a3e1db29ea801b5b6cf8a0242a73d4ce3801170cd75d10b4e2d40b76960c
SSDEEP

1536:VU/mNaYxBCiRocvBm2EirfNXdYXntbyDbwYZye+VEJ4Z09m5PswFFMCYJq9:V0yaB3cvBm2EEtaeDcYQvQFmJswFyCY+

Score

6^/10

discovery

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	x32.xxx.elf

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	x32.xxx.elf

/tmp/x32.xxx.elf
/tmp/x32.xxx.elf
1⤵
- Reads system routing table
- Reads system network configuration
PID:1560

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads