ca0e83440b77eca4d2eda6efd9530b49ffb477f87f36637b5e43f2e428898766 | Triage

Analysis

max time kernel
9673s
max time network
124s
platform
linux_amd64
resource
ubuntu-amd64
submitted
11-03-2021 14:55

Sharing

Report Analysis Logs

General

Target

ca0e83440b77eca4d2eda6efd9530b49ffb477f87f36637b5e43f2e428898766
Size

942KB
MD5

9be7bb0bcd93d46d9d9665666f217ed1
SHA1

d4bc9168836bbbb5ef32c402cb10000136912f34
SHA256

ca0e83440b77eca4d2eda6efd9530b49ffb477f87f36637b5e43f2e428898766
SHA512

a6bddc5eb7223f38145b615be1b4e8467114d0d6851e7200833a158a18757705731c0ec8f4b137c941070422c206ac3ef6b309b2a25bda0a809eb3971ed062dc

Score

8^/10

Malware Config

Signatures

Modifies hosts file 1 IoCs
Adds to hosts file used for mapping hosts to IP addresses.

Processes:

description ioc

/etc/hosts /etc/hosts
Writes DNS configuration 1 TTPs 1 IoCs
Writes data to DNS resolver config file.

Dynamic Resolution
T1568

Processes:

description ioc

/etc/resolv.conf /etc/resolv.conf

./ca0e83440b77eca4d2eda6efd9530b49ffb477f87f36637b5e43f2e428898766
./ca0e83440b77eca4d2eda6efd9530b49ffb477f87f36637b5e43f2e428898766
1⤵
PID:562

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Dynamic Resolution

Impact

Replay Monitor

Loading Replay Monitor...