98a37b3840087bf66277bc583cc17b2cd70e3ad461d02c412ddca8c21d1d26a5

Analysis

max time kernel
124s
max time network
142s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20231215-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20231215-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
19-12-2023 23:29

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6a701ac2c19f23d1c2675d23ec2f16ae
Size

99KB
MD5

6a701ac2c19f23d1c2675d23ec2f16ae
SHA1

3480f093900c619044ebf0b535b577466d86de0c
SHA256

98a37b3840087bf66277bc583cc17b2cd70e3ad461d02c412ddca8c21d1d26a5
SHA512

96429139969e3d89d03aad61949216715d17c26abb2e98dfdf103e9462e85aef3dd179599bc0a8d43dd354eaa18f20550d7eac0835cbe22d24c6ebda755c428f
SSDEEP

3072:2Fx2TM4eNv85qf5oqiXZ1k2t4SL1XMG9gitK:fo2iCq+Vt4SL1Xf9gitK

Score

7^/10

Malware Config

Signatures

Changes its process name 1 IoCs

description	pid	Process
Changes the process name, possibly in an attempt to hide itself	1549	6a701ac2c19f23d1c2675d23ec2f16ae

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	6a701ac2c19f23d1c2675d23ec2f16ae

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	6a701ac2c19f23d1c2675d23ec2f16ae

/tmp/6a701ac2c19f23d1c2675d23ec2f16ae
/tmp/6a701ac2c19f23d1c2675d23ec2f16ae
1⤵
- Changes its process name
- Reads system routing table
- Reads system network configuration
PID:1549

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads