Overview

overview

7

Static

static

1

1a7f7bd1db...8e3278

ubuntu-18.04-amd64

7

Analysis

  • max time kernel
    145s
  • max time network
    157s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20231215-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20231215-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    19-12-2023 22:38

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1a7f7bd1dbed1ed804ede199188e3278

  • Size

    73KB

  • MD5

    1a7f7bd1dbed1ed804ede199188e3278

  • SHA1

    d743d3a79e13e5d19ac896f0b012dec0decbc945

  • SHA256

    8dd64d7443cd857237d022f7dd12f1c2c01a15b7602be2b9c46bf66f234ee74a

  • SHA512

    1b999e0117ddd8e0581d37018911ff88145f614e72b0bc4c77c69de713a1fbff90426e61198db1e9fd6e9c704938765d4903c9d7d91d51c41a1a141e0c75c2d6

  • SSDEEP

    1536:xVVI3lguLYiPvoVjRWSbXJ0rWlC/kPstVkYFiw2bQW83LZ5:a3KwYiPvoVjRWSbLQ/kPstVkvw2kN

Score
7/10

Malware Config

Signatures

  • Changes its process name 1 IoCs
  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/1a7f7bd1dbed1ed804ede199188e3278
    /tmp/1a7f7bd1dbed1ed804ede199188e3278
    1⤵
    • Changes its process name
    • Reads system routing table
    • Reads system network configuration
    PID:1541

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads