12e20c8380c4f76fb99e00ad484621cfec27ce239483a55844e4b42ea8db1100

Analysis

max time kernel
147s
max time network
147s
platform
ubuntu-22.04_amd64
resource
ubuntu2204-amd64-20240611-en
resource tags

arch:amd64arch:i386image:ubuntu2204-amd64-20240611-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
submitted
20-12-2024 05:37

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

CONSTANT_STRATEGY.elf
Size

13.2MB
MD5

abbf52dd16b588944358ad6b92dd55b0
SHA1

9a67c0b8db60c7b243c121a41745fd4f34a4372c
SHA256

12e20c8380c4f76fb99e00ad484621cfec27ce239483a55844e4b42ea8db1100
SHA512

d26b621cb5172abbddccba6e0d03306d226b53fac9d2b5c8bb5a12f5d7eeedcb3d451fb7c4d7accbeb1ede1c48f25f0f4caa43e8a246f55202d218abab4c936e
SSDEEP

98304:VH6QuQhBOL3Vv1kNMJuVEQDwivBMbluIJ0Yqoo:5vtBO7t0vOuqZVo

Score

3^/10

discovery

Malware Config

Signatures

Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

discovery

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	CONSTANT_STRATEGY.elf

/tmp/CONSTANT_STRATEGY.elf
/tmp/CONSTANT_STRATEGY.elf
1⤵
- Enumerates kernel/hardware configuration
PID:1571

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads