df90558a84cfcf80639f32b31aec187b813df556e3c155a05af91dedfd2d7429

Analysis

max time kernel
2207s
max time network
147s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20221111-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20221111-enkernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
03-12-2022 23:37

Target

df90558a84cfcf80639f32b31aec187b813df556e3c155a05af91dedfd2d7429
Size

84KB
MD5

355358a22b6f1d9e122c2ff830b2849b
SHA1

b19c1696b032805014f9cc289caf45e346936583
SHA256

df90558a84cfcf80639f32b31aec187b813df556e3c155a05af91dedfd2d7429
SHA512

3a99d2798af91c982be363fd624098c2fbbc4c042b00e5d27d15225b7816ac2d6f028b88918ed43ac2722f65aafdb63536e46c7cca3ee24ad0ddc4c109e9f6de
SSDEEP

1536:rV3T+Q0YNuV8NnUTnhhW+LUlP7oqHekyN/1H5xuM8VS:rVqxWUTnhhW+LOoq+xN/1Zx2o

Score

8^/10

Writes DNS configuration 1 TTPs 1 IoCs
Writes data to DNS resolver config file.

Dynamic Resolution
T1568

Processes:

description ioc

/etc/resolv.conf /etc/resolv.conf

description	ioc
/etc/resolv.conf	/etc/resolv.conf

/tmp/df90558a84cfcf80639f32b31aec187b813df556e3c155a05af91dedfd2d7429
/tmp/df90558a84cfcf80639f32b31aec187b813df556e3c155a05af91dedfd2d7429
1⤵
PID:605

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Dynamic Resolution

Exfiltration

Impact