7c39841ba409bce4c2c35437ecf043f22910984325c70b9530edf15d826147ee | Triage™

Resubmissions

25/07/2022, 20:25

220725-y7hvpadfe6

21/07/2022, 15:45

220721-s7j5vsghhq10

24/01/2022, 04:31

220124-e5d9yacagq10

Analysis

max time kernel
4018s
max time network
119s
platform
linux_amd64
resource
ubuntu1804-amd64-en-20211208
submitted
24/01/2022, 04:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
7c39841ba409bce4c2c35437ecf043f22910984325c70b9530edf15d826147ee
Size 6.4MB
Sample220124-e5d9yacagq
SHA256 7c39841ba409bce4c2c35437ecf043f22910984325c70b9530edf15d826147ee
MD5 4d38ac3319b167f6c8acb16b70297111
SHA1 01a71390892fad77987aa09a630b04ff72e37d5d
SHA512 aaae4d94f5a1b75917b2c948d4517928b457da0851f65a196b91f30ccd88645a1066b7111db6f7f2267092f8299520044cfcf4400f8285b01db6b309c3dc26c8
MD5 SHA1 SHA512

Score

10^/10

suricata

Malware Config

Signatures

suricata: ET MALWARE APT29/WellMess CnC Activity
suricata: ET MALWARE APT29/WellMess CnC Activity
suricata
suricata: ET MALWARE APT29/Wellness CnC Host Checkin
suricata: ET MALWARE APT29/Wellness CnC Host Checkin
suricata

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
/proc/sys/net/core/somaxconn	/proc/sys/net/core/somaxconn	7c39841ba409bce4c2c35437ecf043f22910984325c70b9530edf15d826147ee

./7c39841ba409bce4c2c35437ecf043f22910984325c70b9530edf15d826147ee
./7c39841ba409bce4c2c35437ecf043f22910984325c70b9530edf15d826147ee
1⤵
- Reads runtime system information
PID:577

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads