36cfb1a7c971041c9483e4f4e092372c9c1ab792cd9de7b821718ccd0dbb09c1

Analysis

max time kernel
128s
max time network
137s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20231215-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20231215-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
30/12/2023, 06:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

10930e9b91df2c91ca6606e8cf304d1f
Size

4.5MB
MD5

10930e9b91df2c91ca6606e8cf304d1f
SHA1

48399aec25e5f5940517a761ff85a542515345ad
SHA256

36cfb1a7c971041c9483e4f4e092372c9c1ab792cd9de7b821718ccd0dbb09c1
SHA512

6e5804b47f81c862990b32da0c57c4547d75d44f32a8826f7ecdf937ec4114bd0df47457b2fb7461f3fd6fe9a579c5289b02a6fcceb460098d13e374a1e5dfcc
SSDEEP

49152:qcP4AQRe6w1LEekNEIx7OCa9NeAdWTxedLjUCszWvKS71LTRAfT+GDWM2tJ11sqq:9D2NEPCkWTqLICGW5LNAqv/i

Score

3^/10

Malware Config

Signatures

Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	10930e9b91df2c91ca6606e8cf304d1f

Writes file to tmp directory 1 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/10930e9b91df2c91ca6606e8cf304d1f.pid	10930e9b91df2c91ca6606e8cf304d1f

/tmp/10930e9b91df2c91ca6606e8cf304d1f
/tmp/10930e9b91df2c91ca6606e8cf304d1f
1⤵
- Enumerates kernel/hardware configuration
- Writes file to tmp directory
PID:1528

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads