c7371127f8731bdb83cf3a9e904cf42f06b5440ebd036943b4ce0da0307d725f

Analysis

max time kernel
123s
max time network
141s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20231215-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20231215-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
20-12-2023 10:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a41a730f6422dc9a2935f875d2a2f961
Size

116KB
MD5

a41a730f6422dc9a2935f875d2a2f961
SHA1

53a6e180e7cbfc720116b186e799f6ca0b3ad313
SHA256

c7371127f8731bdb83cf3a9e904cf42f06b5440ebd036943b4ce0da0307d725f
SHA512

a177b4ae31713b393cea93238cc75cf7c7c0991665f6ccb807f86365ec661ac78c8ae606553327b8e3c534e5cf4af17b3b73781cd8e512eff170a515ab0ae11b
SSDEEP

3072:DDPx3z4BolIIOdDm2etJ8au49QuTsy2og5+r7gxAtc4kG7gyqc:Dt1ITdDdetJ8au4lFtgxAtc4n7gyqc

Score

7^/10

Malware Config

Signatures

Changes its process name 1 IoCs

description	pid	Process
Changes the process name, possibly in an attempt to hide itself	1527	a41a730f6422dc9a2935f875d2a2f961

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	a41a730f6422dc9a2935f875d2a2f961

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	a41a730f6422dc9a2935f875d2a2f961

/tmp/a41a730f6422dc9a2935f875d2a2f961
/tmp/a41a730f6422dc9a2935f875d2a2f961
1⤵
- Changes its process name
- Reads system routing table
- Reads system network configuration
PID:1527

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads