Analysis

  • max time kernel
    120s
  • max time network
    133s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20240226-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20240226-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    15-03-2024 00:57

General

  • Target

    ca1432fadc3b4bef8d582d57ac0e6f5a

  • Size

    4.5MB

  • MD5

    ca1432fadc3b4bef8d582d57ac0e6f5a

  • SHA1

    e50399ad18b0654c725b3384269e838a65d984f5

  • SHA256

    9f9bbbc80a2035df99abd60dc26e9b068b63e5fcc498e700b8cc6640ca39261b

  • SHA512

    7ef64bf805f1ad503e92205384a29c97b0b151ebbe2e0fc8eb022ba55d4aded374c7fd448908a344892b51fa95c747bbdd54787b8966387f5c5690a64ef20ee0

  • SSDEEP

    49152:6cP4AQRe6w1LEekNEIx7OCa9NeAdWTxedLjUCszWvKS71LTRAfT+GDWM2tJ11zqq:tD2NEPCkWTqLICGW5LNAqM/i

Score
3/10

Malware Config

Signatures

  • Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

    Reads contents of /sys virtual filesystem to enumerate system information.

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/ca1432fadc3b4bef8d582d57ac0e6f5a
    /tmp/ca1432fadc3b4bef8d582d57ac0e6f5a
    1⤵
    • Enumerates kernel/hardware configuration
    • Writes file to tmp directory
    PID:1513

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads