Overview

overview

10

Static

static

10

101a1cafaf...484344

ubuntu-18.04-amd64

9

Analysis

  • max time kernel
    154s
  • max time network
    158s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20231215-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20231215-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    19-12-2023 22:31

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    101a1cafaf46738bb5553e8adb484344

  • Size

    73KB

  • MD5

    101a1cafaf46738bb5553e8adb484344

  • SHA1

    79f8137cb918b22e9875144c78a85486a476d9f3

  • SHA256

    c62550680af5648d663567b670fb23d2ccce0485ddcab2a12f72999c2d622d67

  • SHA512

    1fefd62f935f4f6247e184fc847c222811433d20b54ec361e909ffbd09117cc9026d85d94b77642d7dac8c5590fc79bd6614152973c74322ebab3a20e11a05b8

  • SSDEEP

    1536:3wRY6IofX9qkIXiBY/K/l424hrSWn/WHVUqp5az+nKy2:r6IofX9qkIXiB6K/+24hrSWn/WHV3aCK

Score
9/10
discovery

Malware Config

Signatures

  • Contacts a large (20558) amount of remote hosts 1 TTPs

    This may indicate a network scan to discover remotely running services.

    discovery
  • Creates a large amount of network flows 1 TTPs

    This may indicate a network scan to discover remotely running services.

    discovery
  • Modifies Watchdog functionality 1 TTPs 2 IoCs

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Reads runtime system information 64 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/101a1cafaf46738bb5553e8adb484344
    /tmp/101a1cafaf46738bb5553e8adb484344
    1⤵
      PID:1549

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads