Analysis Overview
SHA256
2e1e3f75fdb08c26e41d7870db6ffea5b89b39100899fe609b3c1d0d018c87d3
Threat Level: Likely benign
The file d(41).zip was found to be: Likely benign.
Malicious Activity Summary
Reads runtime system information
Unsigned PE
Enumerates kernel/hardware configuration
MITRE ATT&CK
Enterprise Matrix V15
Analysis: static1
Detonation Overview
Reported
2024-06-14 14:25
Signatures
Unsigned PE
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
Analysis: behavioral2
Detonation Overview
Submitted
2024-06-14 14:23
Reported
2024-06-14 14:28
Platform
ubuntu1804-amd64-20240611-en
Max time kernel
60s
Max time network
129s
Command Line
Signatures
Enumerates kernel/hardware configuration
| Description | Indicator | Process | Target |
| File opened for reading | /sys/kernel/mm/transparent_hugepage/hpage_pmd_size | /tmp/d_lin_x32 | N/A |
Reads runtime system information
| Description | Indicator | Process | Target |
| File opened for reading | /proc/stat | /tmp/d_lin_x32 | N/A |
Processes
/tmp/d_lin_x32
[/tmp/d_lin_x32]
Network
| Country | Destination | Domain | Proto |
| N/A | 224.0.0.251:5353 | udp | |
| GB | 185.125.188.61:443 | tcp | |
| GB | 185.125.188.61:443 | tcp | |
| US | 151.101.1.91:443 | tcp | |
| US | 151.101.1.91:443 | tcp | |
| GB | 89.187.167.5:443 | tcp | |
| US | 1.1.1.1:53 | 1527653184.rsc.cdn77.org | udp |
| US | 1.1.1.1:53 | 1527653184.rsc.cdn77.org | udp |
| N/A | 100.113.139.148:443 | 1527653184.rsc.cdn77.org | tcp |
Files
Analysis: behavioral3
Detonation Overview
Submitted
2024-06-14 14:23
Reported
2024-06-14 14:28
Platform
ubuntu2404-amd64-20240523-en
Max time network
131s
Command Line
Signatures
Processes
Network
| Country | Destination | Domain | Proto |
| N/A | 224.0.0.251:5353 | udp |
Files
Analysis: behavioral4
Detonation Overview
Submitted
2024-06-14 14:23
Reported
2024-06-14 14:28
Platform
debian9-armhf-20240418-en
Command Line
Signatures
Processes
Network
Files
Analysis: behavioral5
Detonation Overview
Submitted
2024-06-14 14:23
Reported
2024-06-14 14:28
Platform
ubuntu2204-amd64-20240611-en
Max time network
129s
Command Line
Signatures
Processes
Network
| Country | Destination | Domain | Proto |
| N/A | 224.0.0.251:5353 | udp |
Files
Analysis: behavioral6
Detonation Overview
Submitted
2024-06-14 14:23
Reported
2024-06-14 14:28
Platform
ubuntu2404-amd64-20240523-en
Max time network
133s
Command Line
Signatures
Processes
Network
| Country | Destination | Domain | Proto |
| N/A | 224.0.0.251:5353 | udp |
Files
Analysis: behavioral1
Detonation Overview
Submitted
2024-06-14 14:23
Reported
2024-06-14 14:29
Platform
debian9-armhf-20240611-en