fedcce505a5e307c1d116d52b3122f6484b3d25fb3c4d666fe7af087cfe85349

Analysis

max time kernel
125s
max time network
132s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20231215-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20231215-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
31/12/2023, 06:08

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2b39cbffdabdda37e3d05fc7603183d0
Size

4.5MB
MD5

2b39cbffdabdda37e3d05fc7603183d0
SHA1

2c0aaaf0e536160d232e9a66ebb5a3ea6993a124
SHA256

fedcce505a5e307c1d116d52b3122f6484b3d25fb3c4d666fe7af087cfe85349
SHA512

37688469583293277cb479137451c900403c0f666434df9d54495016a92b23bc1805a0cfefdce9c4fb59d34cf50d5176f1af4fd974118501bd30870c049c8e19
SSDEEP

49152:V6PwBeRwpNnBt2RNEJBfTvB1NiAYfK0gMz6UTX6fDxdeLrP0oieYBOZhRdXcquAC:fTGNE3vQfK0ztTqfSLrPjN/i

Score

3^/10

Malware Config

Signatures

Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	2b39cbffdabdda37e3d05fc7603183d0

Writes file to tmp directory 1 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/2b39cbffdabdda37e3d05fc7603183d0.pid	2b39cbffdabdda37e3d05fc7603183d0

/tmp/2b39cbffdabdda37e3d05fc7603183d0
/tmp/2b39cbffdabdda37e3d05fc7603183d0
1⤵
- Enumerates kernel/hardware configuration
- Writes file to tmp directory
PID:1541

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads