Analysis

  • max time kernel
    106s
  • max time network
    128s
  • platform
    ubuntu-22.04_amd64
  • resource
    ubuntu2204-amd64-20240611-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2204-amd64-20240611-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
  • submitted
    15-12-2024 01:46

General

  • Target

    11006e12b11f9855795c44b328bd2dbcb75f12e0eab84f04f7d16b5996e857d0.elf

  • Size

    92KB

  • MD5

    c5f57160a1e62fedc1906e8f080d94f0

  • SHA1

    56505da441ef10f038418676c225ca923366fa8a

  • SHA256

    11006e12b11f9855795c44b328bd2dbcb75f12e0eab84f04f7d16b5996e857d0

  • SHA512

    67c2633a1729c02e9a6431d5c6e831f7621e560d00a7add8c2d7e8fba91e8aa99df90ac6f6c1f67ef70499fe2aded61c7b7521120fbbac2b15f5816ebacab2e0

  • SSDEEP

    1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3sMtukmA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjK8Mvm/KWOXF7Y

Score
6/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/11006e12b11f9855795c44b328bd2dbcb75f12e0eab84f04f7d16b5996e857d0.elf
    /tmp/11006e12b11f9855795c44b328bd2dbcb75f12e0eab84f04f7d16b5996e857d0.elf
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:1566

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads