22123fa6c1cb10006ec3f0f68cf091d897657502120b0b7b80f84c7f0ee8ef9d

Analysis

max time kernel
145s
max time network
155s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20231215-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20231215-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
19/12/2023, 23:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

3f7e01fa9b2d373ffa8d4ae1164f921f
Size

148KB
MD5

3f7e01fa9b2d373ffa8d4ae1164f921f
SHA1

47310408be0168792c0cc525c59d564c5c795d8f
SHA256

22123fa6c1cb10006ec3f0f68cf091d897657502120b0b7b80f84c7f0ee8ef9d
SHA512

04b9d3feedf633034574bdc562ed91e0db9e0948ffea536d6a955e5cc74f96a34b4ce446006af2f3dea701b7634edb93b701844227e70634d4acfcc1ad2108fa
SSDEEP

3072:xlzRj+5dUbZJ+G3RjKtq7FOlVGTFlh6pDyWriH90PfNatph1:pUedxv7Mly/siH90PfNatph1

Score

7^/10

Malware Config

Signatures

Changes its process name 1 IoCs

description	pid	Process
Changes the process name, possibly in an attempt to hide itself	1548	3f7e01fa9b2d373ffa8d4ae1164f921f

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	3f7e01fa9b2d373ffa8d4ae1164f921f

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	3f7e01fa9b2d373ffa8d4ae1164f921f

/tmp/3f7e01fa9b2d373ffa8d4ae1164f921f
/tmp/3f7e01fa9b2d373ffa8d4ae1164f921f
1⤵
- Changes its process name
- Reads system routing table
- Reads system network configuration
PID:1548

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads