6d24702a82cd555d36c72b8eb608aade1aea5945e746189bd208b153472a882e

Analysis

max time kernel
120s
max time network
129s
platform
ubuntu-22.04_amd64
resource
ubuntu2204-amd64-20240522.1-en
resource tags

arch:amd64arch:i386image:ubuntu2204-amd64-20240522.1-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
submitted
23/02/2025, 17:48

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

strix.x86.elf
Size

155KB
MD5

eda2256fafedd04041d78793d0359fd7
SHA1

afb2c129d04c7ed135bf5c47966e3448e73518a4
SHA256

6d24702a82cd555d36c72b8eb608aade1aea5945e746189bd208b153472a882e
SHA512

786166404f8133dda66068a24b161cd30071c12aaad3c9f48565c8e58124d00220bd43af7d801b69eab8e47cba6fca2c5b2d46124e57efd7f1b05d6f39f4b9ca
SSDEEP

3072:a8L2FlZkVf62TCX5hGhfNphahpCn38ntVAlZn31mBT38dAY4:Ms1Nphabka6lmBT38dAY4

Score

6^/10

discovery

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	strix.x86.elf

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	strix.x86.elf

/tmp/strix.x86.elf
/tmp/strix.x86.elf
1⤵
- Reads system routing table
- Reads system network configuration
PID:1554

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads