dff3e75f2f72f8123be76f010d7bd71f5f7508dfac84b2b52a721e779abc50c9

Analysis

max time kernel
4s
max time network
135s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20231026-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20231026-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
02/11/2023, 22:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

64e3a3458b3286caaac821c343d4b208
Size

1.4MB
MD5

64e3a3458b3286caaac821c343d4b208
SHA1

8138eba6398650bdbf0c9483515fa5766ef3427a
SHA256

dff3e75f2f72f8123be76f010d7bd71f5f7508dfac84b2b52a721e779abc50c9
SHA512

85e316b019835310361a0ba017734203924249c751960f9b6be9a1795f22b3e3c9fe9a2856642044d5517434969692e29a077b298da62fc6554c001a01e0cba0
SSDEEP

24576:vz4K3M86h3brtlpDVCg6D6vTislXnqC40uERAP3J5IAnOFyO5iFQ/YX+mCBInQ:v01xlXCgAgesgHrP3jnOh582UJ6l

Score

3^/10

Malware Config

Signatures

Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	64e3a3458b3286caaac821c343d4b208

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	64e3a3458b3286caaac821c343d4b208

/tmp/64e3a3458b3286caaac821c343d4b208
/tmp/64e3a3458b3286caaac821c343d4b208
1⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:1522

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads