0c509636143f89899b7106e7b761b1406a5e6aab8f364ae8637e727908821faa

Analysis

max time kernel
152s
max time network
156s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20231215-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20231215-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
20/12/2023, 05:48

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

891e75cd86881af4ddac7f24db9bb87f
Size

78KB
MD5

891e75cd86881af4ddac7f24db9bb87f
SHA1

aa7167cd6e2c4bbbeb859ceeb28ea4bb3a34ba76
SHA256

0c509636143f89899b7106e7b761b1406a5e6aab8f364ae8637e727908821faa
SHA512

8aa20a98492f5623a78eca92908f45d629cd87708b31a1bd0e9e6d77db0d53ed62f2036b532f13a2178c40bae86e1df23c58625bbb35b0eba7d6c424f9cdced6
SSDEEP

1536:+7IZuUaHO1iDnD+Q8bQ8O32Ls0FnswNezvmA+JbOm/coZ3ymj:Qkau1ItqQH2LDnsEezvm/JbOmEoZimj

Score

6^/10

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	891e75cd86881af4ddac7f24db9bb87f

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	891e75cd86881af4ddac7f24db9bb87f

/tmp/891e75cd86881af4ddac7f24db9bb87f
/tmp/891e75cd86881af4ddac7f24db9bb87f
1⤵
- Reads system routing table
- Reads system network configuration
PID:1526

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads