Analysis
-
max time kernel
0s -
max time network
103s -
platform
linux_amd64 -
resource
ubuntu1804-amd64-en-20211208 -
resource tags
-
submitted
28-09-2022 13:48
General
-
Target
bruteratel/adaptiveC2/adaptiveC2.py
-
Size
11KB
-
MD5
e0ccf04cbb5a0c28cf1f4ea9c1f407b6
-
SHA1
2fb1d89db3e61aa3388574d1ac24bee1ee76bbf3
-
SHA256
87c98199dbe7426a50531436e345b601ca3388e879729ae2d0229be9b2e62a2f
-
SHA512
71d99020738c2110801fe3676f64b79cdc536539d96c53e4636455d3f65f5894e4e2f574b588eaf1b9d1b1c650d559d8f090add03dd08c5c4613f92932f876f8
-
SSDEEP
192:BWce98cMQcTMyWtjf2Pf4f6iouwSauLW27NumTzuLZN0sn79snaE4nHBhpLKMfXY:BW0QgBgJouwSauLh7NumTzuLZdn7Cnai
Score
9/10
Malware Config
Signatures
-
Writes file to system bin folder 1 TTPs 1 IoCs
-
Write file to user bin folder 1 TTPs 1 IoCs
-
Writes file to shm directory 2 IoCs
Malware can drop malicious files in the shm directory which will run directly from RAM.
-
Reads runtime system information 3 IoCs
Reads data from /proc virtual filesystem.
-
Writes file to tmp directory 2 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/bruteratel/adaptiveC2/adaptiveC2.py/tmp/bruteratel/adaptiveC2/adaptiveC2.py1⤵
- Write file to user bin folder
- Writes file to shm directory
- Reads runtime system information
- Writes file to tmp directory
-
/sbin/ldconfig/sbin/ldconfig -p2⤵
- Writes file to system bin folder
-
-
/sbin/ldconfig.real/sbin/ldconfig.real -p2⤵
-
-
/bin/sh/bin/sh -c "uname -p 2> /dev/null"2⤵
-
/bin/unameuname -p3⤵
-
-