62758e6a462c6e782d611df325aead9a22038cd2f5585166096da96a37ddd36f

Analysis

max time kernel
146s
max time network
157s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20231215-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20231215-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
19/12/2023, 22:32

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

11e136cdf93f2c0cf402875296b2827e
Size

83KB
MD5

11e136cdf93f2c0cf402875296b2827e
SHA1

e8228752abc2e73e28e13ce1feff8fd71c74f84e
SHA256

62758e6a462c6e782d611df325aead9a22038cd2f5585166096da96a37ddd36f
SHA512

3188c2974452330b7a775509aea730c52138cd43557552a3d8ad2dff5340e7d52624f594eb47bc50fbc7c4c13e477f5ea4aa18588f57fc51144a351d896d0344
SSDEEP

1536:M7YtzULBxDaxqVELIqbs3ScYfQChNebovRzm6+JWrVjDHZnrX:CXLBxDaoK3bYScjC3IoZzmZJWrVHHZnb

Score

6^/10

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	11e136cdf93f2c0cf402875296b2827e

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	11e136cdf93f2c0cf402875296b2827e

/tmp/11e136cdf93f2c0cf402875296b2827e
/tmp/11e136cdf93f2c0cf402875296b2827e
1⤵
- Reads system routing table
- Reads system network configuration
PID:1537

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads