Overview

overview

9

Static

static

1

skyljne.x8...9-1651

ubuntu-18.04-amd64

9

Analysis

  • max time kernel
    72s
  • max time network
    152s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20231222-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20231222-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    09-01-2024 16:53

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    skyljne.x86_64-20240109-1651

  • Size

    156KB

  • MD5

    4231c31ddde5cf66dc53d80f20eac1e9

  • SHA1

    21a1c566754fec8e2e958b301df68f9305db2888

  • SHA256

    60207e9cbf0d178b69789174dbf3e8d0caa0af2a1bc89efa3444ac66bc85cea2

  • SHA512

    887e882629cf012b94fc970182d716374f80c5c0e41dc2880f27f884dbc14491d9b59d2f5239686a5774a0a02005a72cbe108a68a696033ff403b08fa7cb986e

  • SSDEEP

    3072:1eo8cHQCl8NgH47jJvRshW+iMxLPnDImAkElDFdjaEuYlHTxTY6k:1eo8cHQCl8me+wmGx2QHTxTY6

Score
9/10
discovery

Malware Config

Signatures

  • Contacts a large (88685) amount of remote hosts 1 TTPs

    This may indicate a network scan to discover remotely running services.

    discovery
  • Creates a large amount of network flows 1 TTPs

    This may indicate a network scan to discover remotely running services.

    discovery
  • Changes its process name 1 IoCs
  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Reads runtime system information 64 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/skyljne.x86_64-20240109-1651
    /tmp/skyljne.x86_64-20240109-1651
    1⤵
    • Changes its process name
    PID:1603

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads