Analysis

  • max time kernel
    0s
  • max time network
    103s
  • platform
    linux_amd64
  • resource
    ubuntu1804-amd64-en-20211208
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    03-12-2022 23:38

General

  • Target

    12c1b1e48effe60eef7486b3ae3e458da403cd04c88c88fab7fca84d849ee3f5

  • Size

    84KB

  • MD5

    69fc4610667464b37edb750cde2f5783

  • SHA1

    60024cf6fa9adeb384e56367a3a7a7514788d806

  • SHA256

    12c1b1e48effe60eef7486b3ae3e458da403cd04c88c88fab7fca84d849ee3f5

  • SHA512

    07898cf5c48fb8fb4488019cff5067338412580b5801c1e4fdff9da4f32234b36c22c1710ba8a1e5e624cf2a9575cda7ff1c11ffcb3f55aacf6aac34e551af95

  • SSDEEP

    1536:QahOrhUNuV9NnkqnhhWMC8tOadBvwZoXRUqHekyN/1H5xuM8b/3d:Q5JxkqnhhWMhtOqcoXRUq+xN/1Zx2r3

Score
8/10

Malware Config

Signatures

  • Writes DNS configuration 1 TTPs 1 IoCs

    Writes data to DNS resolver config file.

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/12c1b1e48effe60eef7486b3ae3e458da403cd04c88c88fab7fca84d849ee3f5
    /tmp/12c1b1e48effe60eef7486b3ae3e458da403cd04c88c88fab7fca84d849ee3f5
    1⤵
      PID:580

    Network

    MITRE ATT&CK Matrix ATT&CK v6

    Command and Control

    Dynamic Resolution

    1
    T1568

    Replay Monitor

    Loading Replay Monitor...

    Downloads