3bff2c5bfc24fc99d925126ec6beb95d395a85bc736a395aaf4719c301cbbfd4

Analysis

max time kernel
2207s
max time network
134s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20221111-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20221111-enkernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
03-12-2022 23:42

Target

3bff2c5bfc24fc99d925126ec6beb95d395a85bc736a395aaf4719c301cbbfd4
Size

81KB
MD5

35743db3dc333245ef5b69100721ced9
SHA1

fa681933eccc1b3cae4cce6ab6f16db08c2f2a87
SHA256

3bff2c5bfc24fc99d925126ec6beb95d395a85bc736a395aaf4719c301cbbfd4
SHA512

83b1c27459747e9ff14a46b8170e2a22bd751b4acb20489fe6b14801f81b6c3c47dc1990f5dcf8beff445e8f607a6a230d40a53840aa2d5548d2ed2278afc1f4
SSDEEP

1536:mihlrshQNuVhNnUinhhWbCh+Kh0MqHekyN/1H5xuM8gya:mXhFlUinhhWbCh+ohq+xN/1Zx2gy

Score

8^/10

Writes DNS configuration 1 TTPs 1 IoCs
Writes data to DNS resolver config file.

Dynamic Resolution
T1568

Processes:

description ioc

/etc/resolv.conf /etc/resolv.conf

description	ioc
/etc/resolv.conf	/etc/resolv.conf

/tmp/3bff2c5bfc24fc99d925126ec6beb95d395a85bc736a395aaf4719c301cbbfd4
/tmp/3bff2c5bfc24fc99d925126ec6beb95d395a85bc736a395aaf4719c301cbbfd4
1⤵
PID:605

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Dynamic Resolution

Exfiltration

Impact