Analysis

  • max time kernel
    1583s
  • max time network
    151s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20221111-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20221111-enkernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    28-11-2022 19:14

General

  • Target

    2ac9d3ec6c47ccde2296f7f7e1a8753fecaf3cc711dbb60ad1409ad2262af1b3

  • Size

    31KB

  • MD5

    ca920322074c2d39a5d0e1d48a5d5700

  • SHA1

    0009546e7a3fbc1de6c6d36b3759ca3618158e7c

  • SHA256

    2ac9d3ec6c47ccde2296f7f7e1a8753fecaf3cc711dbb60ad1409ad2262af1b3

  • SHA512

    f94677399749615189d3a727d7756e26bca667bf684ce475526599b62830f2e40f775635023c566eeb1093f7f6d7b51d831af6088320409b6af051995aad24c5

  • SSDEEP

    384:f7MfsJZUM778JDWbl1siahkMfd43+yZK53lx:fesJZT778JAyiGRyE53z

Score
5/10

Malware Config

Signatures

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/2ac9d3ec6c47ccde2296f7f7e1a8753fecaf3cc711dbb60ad1409ad2262af1b3
    /tmp/2ac9d3ec6c47ccde2296f7f7e1a8753fecaf3cc711dbb60ad1409ad2262af1b3
    1⤵
    • Writes file to tmp directory
    PID:600
    • /usr/local/sbin/uname
      uname -sr
      2⤵
        PID:601
      • /usr/local/bin/uname
        uname -sr
        2⤵
          PID:601
        • /usr/sbin/uname
          uname -sr
          2⤵
            PID:601
          • /usr/bin/uname
            uname -sr
            2⤵
              PID:601
            • /sbin/uname
              uname -sr
              2⤵
                PID:601
              • /bin/uname
                uname -sr
                2⤵
                  PID:601

              Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads