Overview

overview

5

Static

static

aces-2.8/aces

ubuntu-18.04-amd64

aces-2.8/aces.doc

windows7-x64

4

aces-2.8/aces.doc

windows10-2004-x64

1

aces-2.8/doc/aces.doc

windows7-x64

4

aces-2.8/doc/aces.doc

windows10-2004-x64

1

aces-2.8/s...t2list

ubuntu-18.04-amd64

5

aces-2.8/s...t2list

debian-9-armhf

5

aces-2.8/s...t2list

debian-9-mips

5

aces-2.8/s...t2list

debian-9-mipsel

5

rpc_client

ubuntu-18.04-amd64

rpc_serv

ubuntu-18.04-amd64

snip/snipdos.exe

windows7-x64

snip/snipdos.exe

windows10-2004-x64

snip/sniplin

ubuntu-18.04-amd64

Analysis

  • max time kernel
    0s
  • max time network
    102s
  • platform
    linux_amd64
  • resource
    ubuntu1804-amd64-en-20211208
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    05/12/2022, 07:05

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    aces-2.8/scripts/host2list

  • Size

    253B

  • MD5

    e4c1b5537b086f0611d819224ed21c8a

  • SHA1

    043d98bd1d9255e7459a2d9fbb47fbbf961fbae6

  • SHA256

    e05d81a81bcee69571f75b8809828f6b24966cc704f03b8052f3ba1724052158

  • SHA512

    fe9e4f81f60110630113d5b8ade2f899df14f5fc597a505337ed511d9a8a447eb083c714afc2502fb3d6fc5e06f0862cc24b6aaa37f683f218a1c2f67eec9094

Score
5/10

Malware Config

Signatures

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/aces-2.8/scripts/host2list
    /tmp/aces-2.8/scripts/host2list
    1⤵
    • Writes file to tmp directory
    PID:570
    • /usr/bin/clear
      clear
      2⤵
        PID:571

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads