fd3969d32398bbe3709e9da5f8326935dde664bbc36753bd41a0b111712c0950 | Triage™

Resubmissions

21/07/2022, 15:45

220721-s651yaghhp10

24/01/2022, 02:39

220124-c5s2zsaec65

Analysis

max time kernel
0s
max time network
151s
platform
linux_amd64
resource
ubuntu1804-amd64-en-20211208
submitted
24/01/2022, 02:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
fd3969d32398bbe3709e9da5f8326935dde664bbc36753bd41a0b111712c0950
Size 3.9MB
Sample220124-c5s2zsaec6
SHA256 fd3969d32398bbe3709e9da5f8326935dde664bbc36753bd41a0b111712c0950
MD5 ae7a46529a0f74fb83beeb1ab2c68c5c
SHA1 a57c896486564d7663a4dce6fbf723a1deb81378
SHA512 85cba60ab37b138c271da13f899ee61434f56b24fa611e294e614f608fb8cf8b912fc59e0e5cd03070f57d01efadddd689edbaa65962f7ccfa6c709bb9b8a470
MD5 SHA1 SHA512

Score

10^/10

suricata

Malware Config

Signatures

suricata: ET MALWARE APT29/Wellness CnC Host Checkin
suricata: ET MALWARE APT29/Wellness CnC Host Checkin
suricata

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
/proc/sys/net/core/somaxconn	/proc/sys/net/core/somaxconn	fd3969d32398bbe3709e9da5f8326935dde664bbc36753bd41a0b111712c0950

./fd3969d32398bbe3709e9da5f8326935dde664bbc36753bd41a0b111712c0950
./fd3969d32398bbe3709e9da5f8326935dde664bbc36753bd41a0b111712c0950
1⤵
- Reads runtime system information
PID:581

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads