Resubmissions

08/03/2024, 15:52

240308-tbjd5abh3t 7

08/03/2024, 15:49

240308-s9kjeabg5w 7

Analysis

  • max time kernel
    149s
  • max time network
    148s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20240226-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20240226-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    08/03/2024, 15:49

General

  • Target

    9cb6dc863e56316364c7c1e51f74ca991d734dacef9029337ddec5ca684c1106

  • Size

    1.5MB

  • MD5

    026f376489bcb2a3c0b3a64235885652

  • SHA1

    70a309c7fce5f3db4c6e5bf06a746afa41eb931b

  • SHA256

    9cb6dc863e56316364c7c1e51f74ca991d734dacef9029337ddec5ca684c1106

  • SHA512

    9467f269e411301fd8498e622d70ab348edb53b85c2d56a75e7c4ff8e7c1aa610e6fb17cc2ff816535f4c7a0225532a4193400d2bbbb098db6f5cc06064543cd

  • SSDEEP

    24576:2UUh3to6d0wmD/pPPMYrpaft90XrHhnzmEDSUfEcnZnNSjZA0vgVXF4tYcARlQpl:2nh3to5xDp3VrpaT0Hg46cnZNSjZdcFU

Score
3/10

Malware Config

Signatures

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/9cb6dc863e56316364c7c1e51f74ca991d734dacef9029337ddec5ca684c1106
    /tmp/9cb6dc863e56316364c7c1e51f74ca991d734dacef9029337ddec5ca684c1106
    1⤵
    • Reads runtime system information
    PID:1572
  • /bin/sh
    sh -c "cat /etc/machine-id"
    1⤵
      PID:1574
      • /bin/cat
        cat /etc/machine-id
        2⤵
          PID:1575

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /tmp/debconf.socket

        Filesize

        384B

        MD5

        82b4eb97305031d82f80490a18d72a9e

        SHA1

        9b506465912dacd8fa101564024b7bb03731f4ac

        SHA256

        8ef0022416e24d0a9f0a22bae41b783c5a4c0728e73f7921e866a9d7ccb6536d

        SHA512

        1246c9af5650c0ce26251951137551e2f905b70a31ee4dfc6e1b066b88b4e80a00e26bbb62297ac199d86ad1779b01eef8380f91acccefc8704bae65ac1382f3