440d3e590bd3bb782e0f17649eac9e11d3041c90a67faec48ecf6281af272225

Analysis

max time kernel
149s
max time network
151s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20260513-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
30/09/2026, 19:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
x-3.2-.SNOOPY.elf
Size 72KB
Sample260930-x18xvsxwft
SHA256 440d3e590bd3bb782e0f17649eac9e11d3041c90a67faec48ecf6281af272225
MD5 0b4543bbced136cece99c99614e3c8d6
SHA1 e520b4d4fa968016692e7e64ecb3eef3473b0820
SHA512 7879093c115c1cd4a9694d29016d182ea5f8540756473b9e788f9322782d848640ebc65f9ad18dda88af0f8232bb94b9f0cb61322f709d355acf7e1d1f4cf16b
SSDEEP 1536:nm+c5osQWiKLoxKFn6pD+OTxzMTMmLI2VOCjXUfJRk:45omr0xKFn6J+OUMmU2VOCbUfJRk
TLSH
T139733A02E652CAB3C8930BB602AB9B664631FD2A1E2B9F59F31C7DF49F124C87117355
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	x-3.2-.SNOOPY.elf

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	x-3.2-.SNOOPY.elf

/tmp/x-3.2-.SNOOPY.elf
/tmp/x-3.2-.SNOOPY.elf
1⤵
- Reads system routing table
- Reads system network configuration
PID:1491

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads