5991ed79238ab8bd0f4c4983e3e6fbc73784396daf7d585349eae37d5907c60b

Analysis

max time kernel
149s
max time network
151s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20260513-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
07/09/2026, 03:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.elf
Size 92KB
Sample260907-ejmzyswwft
SHA256 5991ed79238ab8bd0f4c4983e3e6fbc73784396daf7d585349eae37d5907c60b
MD5 b015a03784a64f9f76c3aadce8ef0902
SHA1 4df07aec0c435596f6403b3fd293dfbc0695cbe6
SHA512 ef4dbeff702ecb78834fadec931f02392897df90c36980b6166ba5701af8898cce7da18c647ddb9dff6ca4f87f2badfc9b92aaa7082710cf4056bb7d33ec119a
SSDEEP 1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3UyPXfH0mA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjKkifUm/KWOXFE
TLSH
T103935D27B552C6BBC08752B42BDFEA615833B4BC0B32720B33D47DA52B259D91E6DB01
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	sample.elf

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	sample.elf

/tmp/sample.elf
/tmp/sample.elf
1⤵
- Reads system routing table
- Reads system network configuration
PID:1508

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads