c4a6ec320f8e652e24b36d365b76dcd6def7c30fbea28611fdba1172ce124ea2

Analysis

max time kernel
123s
max time network
141s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20231215-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20231215-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
19/12/2023, 23:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

51847dbebbcfdee145e889ac3937367d
Size

122KB
MD5

51847dbebbcfdee145e889ac3937367d
SHA1

53e7d9d32db0f0e183779fdcdfdec91544dd80d6
SHA256

c4a6ec320f8e652e24b36d365b76dcd6def7c30fbea28611fdba1172ce124ea2
SHA512

ccd0e542c9d5d3567ac4a8737cfb4d10ca2a607e52714c062f6a7d7b166859891e88f553e6b7275258c80aba352d4490172f56dfddf383d828e3f0b94f764671
SSDEEP

3072:loqjjz4XsWaYsQp6+iketJ8add9QzTswzV22Jg4NKcXeGcgqGK:lFDQo+iketJ8addQ1Y2Jg4NKcXdcgqGK

Score

7^/10

Malware Config

Signatures

Changes its process name 1 IoCs

description	pid	Process
Changes the process name, possibly in an attempt to hide itself	1525	51847dbebbcfdee145e889ac3937367d

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	51847dbebbcfdee145e889ac3937367d

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	51847dbebbcfdee145e889ac3937367d

/tmp/51847dbebbcfdee145e889ac3937367d
/tmp/51847dbebbcfdee145e889ac3937367d
1⤵
- Changes its process name
- Reads system routing table
- Reads system network configuration
PID:1525

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads