fd3969d32398bbe3709e9da5f8326935dde664bbc36753bd41a0b111712c0950 | Triage

Resubmissions

21-07-2022 15:45

220721-s651yaghhp 10

24-01-2022 02:39

220124-c5s2zsaec6 5

Analysis

max time kernel
0s
max time network
151s
platform
linux_amd64
resource
ubuntu1804-amd64-en-20211208
submitted
24-01-2022 02:39

Sharing

Report Analysis Logs

General

Target

fd3969d32398bbe3709e9da5f8326935dde664bbc36753bd41a0b111712c0950
Size

3.9MB
MD5

ae7a46529a0f74fb83beeb1ab2c68c5c
SHA1

a57c896486564d7663a4dce6fbf723a1deb81378
SHA256

fd3969d32398bbe3709e9da5f8326935dde664bbc36753bd41a0b111712c0950
SHA512

85cba60ab37b138c271da13f899ee61434f56b24fa611e294e614f608fb8cf8b912fc59e0e5cd03070f57d01efadddd689edbaa65962f7ccfa6c709bb9b8a470

Score

10^/10

suricata

Malware Config

Signatures

suricata: ET MALWARE APT29/Wellness CnC Host Checkin
suricata: ET MALWARE APT29/Wellness CnC Host Checkin
suricata
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.

Processes:

fd3969d32398bbe3709e9da5f8326935dde664bbc36753bd41a0b111712c0950

description ioc process

/proc/sys/net/core/somaxconn /proc/sys/net/core/somaxconn fd3969d32398bbe3709e9da5f8326935dde664bbc36753bd41a0b111712c0950

./fd3969d32398bbe3709e9da5f8326935dde664bbc36753bd41a0b111712c0950
./fd3969d32398bbe3709e9da5f8326935dde664bbc36753bd41a0b111712c0950
1⤵
- Reads runtime system information
PID:581

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...