21d5021d00e95dba6e23cee3e83b126b068ad936128894a1750bbcd4f1eb9391

Analysis

max time kernel
5s
max time network
133s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20231215-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20231215-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
05-02-2024 11:44

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

91e7c89e6373419c0147dda3f4ba32a9
Size

4.5MB
MD5

91e7c89e6373419c0147dda3f4ba32a9
SHA1

4645ab9178c9cf7330f5b50ddb6b627d58dfd43d
SHA256

21d5021d00e95dba6e23cee3e83b126b068ad936128894a1750bbcd4f1eb9391
SHA512

4a6f78c09f698ae2d4a402d6b37eb2e3bd84a6019a355e58bc4cbbc5051f5598f6319c8401ad69552325fd7e593936865e5ad821b40b49381156d7df9da14ce1
SSDEEP

49152:UIPweIRiyshXMrzNEwVzZbW9teAJTwu7dXLcK/tCZ2kZLKYDsf8JulVkdkotl6qq:VTiNEYb0TwAXYKFCNLjDfR/i

Score

3^/10

Malware Config

Signatures

Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	91e7c89e6373419c0147dda3f4ba32a9

Writes file to tmp directory 1 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/91e7c89e6373419c0147dda3f4ba32a9.pid	91e7c89e6373419c0147dda3f4ba32a9

/tmp/91e7c89e6373419c0147dda3f4ba32a9
/tmp/91e7c89e6373419c0147dda3f4ba32a9
1⤵
- Enumerates kernel/hardware configuration
- Writes file to tmp directory
PID:1542

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads