a09046ea09f9ffa62060dcf441c8286c7a67f289173f51880cbc0cf300db6682

Analysis

max time kernel
153s
max time network
156s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20231215-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20231215-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
20/12/2023, 05:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

87f6c9d01cb06622e912c2ef5e0136d4
Size

61KB
MD5

87f6c9d01cb06622e912c2ef5e0136d4
SHA1

078c89db04f0b9c3ebf53274734bccdf49c41709
SHA256

a09046ea09f9ffa62060dcf441c8286c7a67f289173f51880cbc0cf300db6682
SHA512

31cce76709f6317ee225546e08230f2bb38a1c6cc116dc4d5447318c22b56f48a64cf0974d47a15c032739531cafea32b2d2e85f3cf8b3fba36a8d0692189c10
SSDEEP

1536:t8Is4pkrpYhYqNCsrif9svy/pV6aALXt:tlbqUbrM9uy/v6/

Score

9^/10

discovery

Malware Config

Signatures

Contacts a large (37877) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	87f6c9d01cb06622e912c2ef5e0136d4

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	87f6c9d01cb06622e912c2ef5e0136d4

/tmp/87f6c9d01cb06622e912c2ef5e0136d4
/tmp/87f6c9d01cb06622e912c2ef5e0136d4
1⤵
- Reads system routing table
- Reads system network configuration
PID:1529

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

T1046

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads