004c69d0e330dbb6a81d0978236561af2867bc919269d8201461d30ab400bad2

Analysis

max time kernel
144s
max time network
154s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20231215-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20231215-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
20/12/2023, 06:22

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8b464e787d74d8599b0febb7df7114bf
Size

171KB
MD5

8b464e787d74d8599b0febb7df7114bf
SHA1

b35e8758229ce7423dc8d0302bc652de8bb95149
SHA256

004c69d0e330dbb6a81d0978236561af2867bc919269d8201461d30ab400bad2
SHA512

b8b0582a1be615d065291009585016c4d15f9e87edd857e3d258099723b12aaf11727521857d0d05fad536bf746ecea605218a6a313f4ca8a6297f939700643e
SSDEEP

3072:6N2nBmZu1EJqCKLqoE45zM5NCUXApBljZIMByLpqPQmPOLVPU8oJDHX:DnJe45z+wlGM4LpklPOLVPU8oJDHX

Score

7^/10

Malware Config

Signatures

Changes its process name 1 IoCs

description	pid	Process
Changes the process name, possibly in an attempt to hide itself	1546	8b464e787d74d8599b0febb7df7114bf

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	8b464e787d74d8599b0febb7df7114bf

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	8b464e787d74d8599b0febb7df7114bf

/tmp/8b464e787d74d8599b0febb7df7114bf
/tmp/8b464e787d74d8599b0febb7df7114bf
1⤵
- Changes its process name
- Reads system routing table
- Reads system network configuration
PID:1546

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads