2e81517ee4172c43a2084be1d584841704b3f602cafc2365de3bcb3d899e4fb8

Analysis

max time kernel
0s
max time network
102s
platform
linux_amd64
resource
ubuntu1804-amd64-en-20211208
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
03-12-2022 23:43

Target

2e81517ee4172c43a2084be1d584841704b3f602cafc2365de3bcb3d899e4fb8
Size

84KB
MD5

24b411d2407527c7a58317c6758dca09
SHA1

f85e3ef06c8b5cf8805a4df2560338f007cf3dd7
SHA256

2e81517ee4172c43a2084be1d584841704b3f602cafc2365de3bcb3d899e4fb8
SHA512

8efb648dade73d9cf34ce9adfc553d369c8302ba2c7c89d9e720e5ccfdfbc6646570c9580f07cee197597a2c8550ab3693561a08e34aca41fde20f1db17151fb
SSDEEP

1536:rV3T+Q0YNuV8NnUTnhhW+LUlP7oqHekyN/1H5xuM8VS:rVqxWUTnhhW+LOoq+xN/1Zx2o

Score

8^/10

Modifies hosts file 1 IoCs
Adds to hosts file used for mapping hosts to IP addresses.

Processes:

description ioc

/etc/hosts /etc/hosts
Writes DNS configuration 1 TTPs 1 IoCs
Writes data to DNS resolver config file.

Dynamic Resolution
T1568

Processes:

description ioc

/etc/resolv.conf /etc/resolv.conf

description	ioc
/etc/hosts	/etc/hosts

description	ioc
/etc/resolv.conf	/etc/resolv.conf

/tmp/2e81517ee4172c43a2084be1d584841704b3f602cafc2365de3bcb3d899e4fb8
/tmp/2e81517ee4172c43a2084be1d584841704b3f602cafc2365de3bcb3d899e4fb8
1⤵
PID:571

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Dynamic Resolution

Impact