Analysis

  • max time kernel
    148s
  • max time network
    149s
  • platform
    ubuntu-22.04_amd64
  • resource
    ubuntu2204-amd64-20240522.1-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2204-amd64-20240522.1-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
  • submitted
    21/02/2025, 03:59

General

  • Target

    b4752ddf291699be63d00b3de146d9af1795332482bc77c3f5087405dcde6560.elf

  • Size

    106KB

  • MD5

    fa1a16bc44812a0f48fde8f54103db16

  • SHA1

    b80f4807a61834a02102f2f38ead23fc1a8facf1

  • SHA256

    b4752ddf291699be63d00b3de146d9af1795332482bc77c3f5087405dcde6560

  • SHA512

    4b659892794f2177fafac931198a4e5ca452c987c6ab273bd83637c9cff4fe6a5f303b20725eb88b4a0d1ad1b0a32be39df96ae74b6a4a33303315d630b1f0d6

  • SSDEEP

    3072:j6dye4BmJQZphaZw/1vc4LAzkSXmdRWaLHgb4:dZphaZcOrmdRWaDgb4

Score
6/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/b4752ddf291699be63d00b3de146d9af1795332482bc77c3f5087405dcde6560.elf
    /tmp/b4752ddf291699be63d00b3de146d9af1795332482bc77c3f5087405dcde6560.elf
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:1563

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads