Analysis
-
max time kernel
5s -
max time network
3s -
platform
ubuntu-24.04_amd64 -
resource
ubuntu2404-amd64-20250307-en -
resource tags
-
submitted
08/04/2025, 10:12
General
-
Target
01bdbcadb6b151562a7ff207280368ab9f77a976114494479415eec71d1a5b51.elf
-
Size
57KB
-
MD5
caf4a18e806274c837ea68a1b34f6755
-
SHA1
9d3a79b50941f32fc94a2f9a30dde2e2dc21f7bb
-
SHA256
01bdbcadb6b151562a7ff207280368ab9f77a976114494479415eec71d1a5b51
-
SHA512
71eaf0593657b7da64d20ac60b5d6a9e0657444b3c33cc039b49fbd5be6072c892b0f69556297b8ecd533a40036e639ff78935b3e8919a18a730226fa28021b8
-
SSDEEP
1536:1XIY73si3qEToSRhIN2Q/K6C8u50pfEHwNLJ:2Y7H6ETRhID/Kn5qEHw1J
Score
6/10
Malware Config
Signatures
-
Enumerates active TCP sockets 1 TTPs 1 IoCs
Gets active TCP sockets from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/01bdbcadb6b151562a7ff207280368ab9f77a976114494479415eec71d1a5b51.elf/tmp/01bdbcadb6b151562a7ff207280368ab9f77a976114494479415eec71d1a5b51.elf1⤵
- Enumerates active TCP sockets
- Reads system network configuration