9b6856b00dfa4b4065c4094b808cc9e930abc84f62f7a8dd2a18ce07bf8f425b

Analysis

max time kernel
123s
max time network
130s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20231215-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20231215-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
20/12/2023, 09:30

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9ce2db99de3daec7a2a21d1eef319ee0
Size

119KB
MD5

9ce2db99de3daec7a2a21d1eef319ee0
SHA1

9461e11bf414e5dd40257287e4a574acb41fe97e
SHA256

9b6856b00dfa4b4065c4094b808cc9e930abc84f62f7a8dd2a18ce07bf8f425b
SHA512

57e15cba5d39d54a572442e2a60fe3eccb9aec1fcfd4f05f22abe31dec6ca076a06f44da888919a28b6774a1c77e2fd3c5eaf3f21f3655027966efa6a698808a
SSDEEP

3072:YmxmGdLzxjVZxbZYhT+1FXT2GgrRt1KFGwcz0Y:Yod1ZYZGx2GgrRt1Kwwcz0Y

Score

7^/10

Malware Config

Signatures

Changes its process name 1 IoCs

description	pid	Process
Changes the process name, possibly in an attempt to hide itself	1534	9ce2db99de3daec7a2a21d1eef319ee0

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	9ce2db99de3daec7a2a21d1eef319ee0

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	9ce2db99de3daec7a2a21d1eef319ee0

/tmp/9ce2db99de3daec7a2a21d1eef319ee0
/tmp/9ce2db99de3daec7a2a21d1eef319ee0
1⤵
- Changes its process name
- Reads system routing table
- Reads system network configuration
PID:1534

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads