7a7bcea2ecc9d966014ee23274dae032d80a86a5dc3f5e18881b6adc63440f45

Analysis

max time kernel
144s
max time network
155s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20231215-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20231215-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
20-12-2023 14:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

c0956ee55d2fe9f875598f14ca9f1b6d
Size

79KB
MD5

c0956ee55d2fe9f875598f14ca9f1b6d
SHA1

928676147dc93910deb45646347c26cc4ae44dac
SHA256

7a7bcea2ecc9d966014ee23274dae032d80a86a5dc3f5e18881b6adc63440f45
SHA512

074b5ef8ca325a7128ea5d3ae67a74a5349c8bc8ffb521dcc7068ed1c8c6139e81f8f81e90d3a9b566e1616bce61e8b394c52e7f066631168e16f5379306ac52
SSDEEP

1536:h8UBmwa5hWbuKcYNKooVBwKGXw+hImmLITVlzs6ZfWEk:Bw9ay3YNKooXwpdSmmUTVlz1ZfWEk

Score

6^/10

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	c0956ee55d2fe9f875598f14ca9f1b6d

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	c0956ee55d2fe9f875598f14ca9f1b6d

/tmp/c0956ee55d2fe9f875598f14ca9f1b6d
/tmp/c0956ee55d2fe9f875598f14ca9f1b6d
1⤵
- Reads system routing table
- Reads system network configuration
PID:1532

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads