Overview

overview

10

Static

static

10

74a50e984e...7e4336

ubuntu-18.04-amd64

7

Analysis

  • max time kernel
    143s
  • max time network
    153s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20231215-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20231215-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    20/12/2023, 00:26

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    74a50e984ef94014f58ad99e5c7e4336

  • Size

    143KB

  • MD5

    74a50e984ef94014f58ad99e5c7e4336

  • SHA1

    196d433a5d7007b3687e396bc41a7fd6ed7d9834

  • SHA256

    4b6a02ec3d3e9779d80b8468a9eaef6c51dfd754147dcb0c92b1deb423d0f309

  • SHA512

    e698aaf56e7ef87981f5ecf08578948bf606b1a288943d9837f6aba8065aaf67f4ad258e13d02b574e8aa12b0bed5d2bca53b2ea2ba45d8748497819e0acd036

  • SSDEEP

    3072:2t8wd9Jb+mWMZv+SsW0btDDX+e/n0o8e7XH90PcZsatph1:uZd3amAfNDX+e/n77XH90PcZsatph1

Score
7/10

Malware Config

Signatures

  • Changes its process name 1 IoCs
  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/74a50e984ef94014f58ad99e5c7e4336
    /tmp/74a50e984ef94014f58ad99e5c7e4336
    1⤵
    • Changes its process name
    • Reads system routing table
    • Reads system network configuration
    PID:1520

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads