4685cfc95825d93fd992b300aa5919433266fb5ba20a44cf220b455816045e9c

Analysis

max time kernel
0s
max time network
3s
platform
ubuntu-22.04_amd64
resource
ubuntu2204-amd64-20240611-en
resource tags

arch:amd64arch:i386image:ubuntu2204-amd64-20240611-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
submitted
23/02/2025, 10:35

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

318238128.x86
Size

106KB
MD5

eff583050d8459e83bcd5ceab1fcfb1f
SHA1

d010522bc3eae23063aaf7d1234cd5115cdbe26a
SHA256

4685cfc95825d93fd992b300aa5919433266fb5ba20a44cf220b455816045e9c
SHA512

7730ad10a46d51236c52320fa2cdbfe8a635d2cdd408de6e91b740f7c2681479de4dcf66b9f23f7e2c9571a2df9db4db896d33427ac4495ac43d6643f2d66a61
SSDEEP

3072:j6dye4BmJQVphaZw/1vc4MAzkSXmdRWaLHgb4:dVphaZcvrmdRWaDgb4

Score

6^/10

discovery

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	318238128.x86

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	318238128.x86

/tmp/318238128.x86
/tmp/318238128.x86
1⤵
- Reads system routing table
- Reads system network configuration
PID:1584

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads