ed730956c577fc1035d6f47b25a9edf2e67f8d67b744d3861f7434760c89525d

Analysis

max time kernel
154s
max time network
156s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20231215-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20231215-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
19-12-2023 22:36

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

17665ee9b1c47945a1e0cbeced560d7c
Size

156KB
MD5

17665ee9b1c47945a1e0cbeced560d7c
SHA1

18b4332da002d1821c1bcb21094845ae0ed25df8
SHA256

ed730956c577fc1035d6f47b25a9edf2e67f8d67b744d3861f7434760c89525d
SHA512

ac6b4b66ec2bc7afc3ee51a04606602a52b5799140721e31f6de39e9bab37a15d662c5581fc992d14e35f6c46be6d719bb27b46ed501855baacd05e480b43b3b
SSDEEP

3072:iJ+o7GSOnwrUgLJlt7Li93qzbBIPCxVHklZGMZCY5T4k/2/PoZ:uh7bOn4u9WbBIPCTHklZGMZCY5T4k/2a

Score

6^/10

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery

T1016

description	ioc
File opened for reading	/proc/net/route

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery

T1016

description	ioc
File opened for reading	/proc/net/route

/tmp/17665ee9b1c47945a1e0cbeced560d7c
/tmp/17665ee9b1c47945a1e0cbeced560d7c
1⤵
PID:1551

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads