Analysis

  • max time kernel
    0s
  • max time network
    155s
  • platform
    linux_amd64
  • resource
    ubuntu1804-amd64-en-20211208
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    23-11-2022 15:48

General

  • Target

    1c9536ae74850d81225a46c7f503fdc79df79c23fb34f4bb5fd0c0dc6285f7a6

  • Size

    15KB

  • MD5

    614d98ac77b9c15815cd31cfcf7840b3

  • SHA1

    1e521cb22b27fd0d801a9176ca7d6adcd5bf3821

  • SHA256

    1c9536ae74850d81225a46c7f503fdc79df79c23fb34f4bb5fd0c0dc6285f7a6

  • SHA512

    9cfc6c092ab2942f6eec8557d1d50bf4e6fea8816c7ba5ce3d5d329c4c1970029a238018fa8ab4cc053686dc2a4ccef0737866205eaa953b634f0b36e7cee9b0

  • SSDEEP

    384:ksHYFy+gLES3LnfX9t6tUHef5bUDbGIFgTG10U5VOj:ksHky+gPfyGttFgTY0Nj

Score
6/10

Malware Config

Signatures

  • Creates a large amount of network flows 1 TTPs

    This may indicate a network scan to discover remotely running services.

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/1c9536ae74850d81225a46c7f503fdc79df79c23fb34f4bb5fd0c0dc6285f7a6
    /tmp/1c9536ae74850d81225a46c7f503fdc79df79c23fb34f4bb5fd0c0dc6285f7a6
    1⤵
    • Writes file to tmp directory
    PID:581

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads