6c76523f4d779e7fb4c9790bb9f88fe9d9304b41e128cb8b88f49d28ce869e70

Analysis

max time kernel
5s
max time network
131s
platform
ubuntu-22.04_amd64
resource
ubuntu2204-amd64-20250307-en
resource tags

arch:amd64arch:i386image:ubuntu2204-amd64-20250307-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
submitted
19/03/2025, 00:26

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Federali686Agent.elf
Size

82KB
MD5

50705158da515f780cf861a004859667
SHA1

cec3b9e032642b1a0951ec81d1368516913a0e84
SHA256

6c76523f4d779e7fb4c9790bb9f88fe9d9304b41e128cb8b88f49d28ce869e70
SHA512

a27facd05be05efdfb48a935b47865627115f8363e954986e8ddb7f542841181e243da52e6590b5d7002321d1a83640852f1047cb9bcd88c269cf71259bb08d7
SSDEEP

1536:N71N2rV652DYK2vRylkLfyq8hFXgFVTJWJMgDfEhrzxONxeNe6LO:N718rVzDYHvRylkLfyq87XCqHDfEhrzo

Score

6^/10

discovery

Malware Config

Signatures

Enumerates active TCP sockets 1 TTPs 1 IoCs

Gets active TCP sockets from /proc virtual filesystem.

discovery

System Network Connections Discovery

T1049

description	ioc
File opened for reading	/proc/net/tcp

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

discovery

Internet Connection Discovery

T1016.001

description	ioc
File opened for reading	/proc/net/tcp

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

System Network Connections Discovery

T1049

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads