f2f8cea3d74052a1af34ee0b5fe6f513444083a55d8ccb439abcb92adfb3bd15

Analysis

max time kernel
145s
max time network
147s
platform
ubuntu-22.04_amd64
resource
ubuntu2204-amd64-20240522.1-en
resource tags

arch:amd64arch:i386image:ubuntu2204-amd64-20240522.1-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
submitted
16-12-2024 11:26

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

i586.elf
Size

79KB
MD5

d411fabea60f58d93fad5fdc878d8509
SHA1

44e23558d2b7f7ea8412c41069605bb0b1b957a5
SHA256

f2f8cea3d74052a1af34ee0b5fe6f513444083a55d8ccb439abcb92adfb3bd15
SHA512

75e529e5e5015504bac894647e2fa0789081c867678987595a9f88c024d2fc09682e1dc9ff061dd19f34e940d922b6207ee427dc14ac57fa1acc9df38891ac03
SSDEEP

1536:v/Eo67moXD972+c6tsTngPE56XxCSn9Qgvjtg0md+wVOz+sXcfW7k:v/EzXz97hc6G7gzXxxGEmMwVOz+ucfWQ

Score

6^/10

discovery

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	i586.elf

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	i586.elf

/tmp/i586.elf
/tmp/i586.elf
1⤵
- Reads system routing table
- Reads system network configuration
PID:1552

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads