32656786e92d881fa66d660f13e0d43b28ec5c789c65569b2b6053007617256b

Analysis

max time kernel
122s
max time network
128s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240611-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240611-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
21/02/2025, 09:23

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

skid.x86.elf
Size

90KB
MD5

11d60b6be3d4c9431519c304ec4de4a4
SHA1

1442141cb3c4ddaa8fe2eb657f4bc44be20e415b
SHA256

32656786e92d881fa66d660f13e0d43b28ec5c789c65569b2b6053007617256b
SHA512

205494c8f8226ad15157fa12f125abf543c14075bca602ce4008e889125d5764eba631be03cf0d135a939f8b2a0fd4bd2d419301b6996fa74bfc4c97def31ae6
SSDEEP

1536:W7WREyqkQc923v2uNi7pNF+BoD3Gphanvn00IFmoI5um2Xj5YZA0e:4RkQT3v9EbYBo7Gphanvn00Cmr5um2Xx

Score

6^/10

discovery

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	skid.x86.elf

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	skid.x86.elf

/tmp/skid.x86.elf
/tmp/skid.x86.elf
1⤵
- Reads system routing table
- Reads system network configuration
PID:1499

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads