d7676063a59814fba0f6f1d7054b1ff50fda3019fdb845f40d83aabeda78ccc1

Analysis

max time kernel
151s
max time network
153s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20231215-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20231215-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
20/12/2023, 10:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a441e34f19075f3d249747d8c85b7e88
Size

72KB
MD5

a441e34f19075f3d249747d8c85b7e88
SHA1

517ba2f2602e0661d4db7ec11d326dba001d30c4
SHA256

d7676063a59814fba0f6f1d7054b1ff50fda3019fdb845f40d83aabeda78ccc1
SHA512

c1b8937ebfbdbd255bf8148ea088f243872e9d945fd8f1b401fe8f6d5e1397c962b3f619cd92770bf411272bacdf5348becc49aabde67a0fa36d11b6bca86a84
SSDEEP

1536:qpTcVGPwnVjAWnpvdTk4S3um7qasEGWqejHEKEGz2ctxomP+lVrCjmxfZp1:8cVGPwnVjAWnpFvS3um7hPzbE9+omWlJ

Score

6^/10

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	a441e34f19075f3d249747d8c85b7e88

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	a441e34f19075f3d249747d8c85b7e88

/tmp/a441e34f19075f3d249747d8c85b7e88
/tmp/a441e34f19075f3d249747d8c85b7e88
1⤵
- Reads system routing table
- Reads system network configuration
PID:1532

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads