Analysis

  • max time kernel
    103s
  • max time network
    138s
  • platform
    ubuntu-24.04_amd64
  • resource
    ubuntu2404-amd64-20240523-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
  • submitted
    31-12-2024 03:03

General

  • Target

    e48315a11b764ed5e5fe7c457a7112fba6672b06429cc1efd11c8c68670837eb.elf

  • Size

    98KB

  • MD5

    7ca085966f75c5c7d28bc4518142a5e0

  • SHA1

    e29b77b8d637abed905cae089b7877c45581cd6a

  • SHA256

    e48315a11b764ed5e5fe7c457a7112fba6672b06429cc1efd11c8c68670837eb

  • SHA512

    d781d8156d9bf18233203a484703d5f4ce0250139a52b9d8efb2e0b5b878844a8efe24c3f917a5a05f45f610f41857cbd634c3409ab7b2693a4fec770fe6e7b6

  • SSDEEP

    1536:QBfT9WiC3txvWtfEo5vXJM9wypej++3hxEgL7nLGPTms5TDUMHYr/:QBjC9wtsOnuejjhxEgL7smITDfHYr/

Score
6/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/e48315a11b764ed5e5fe7c457a7112fba6672b06429cc1efd11c8c68670837eb.elf
    /tmp/e48315a11b764ed5e5fe7c457a7112fba6672b06429cc1efd11c8c68670837eb.elf
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:2825

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads