10536ecb2fc08b2ebf96b22526f6880d79ef4cb2dacc2b3498955a1671c4dca9

Analysis

max time kernel
299s
max time network
304s
platform
ubuntu-22.04_amd64
resource
ubuntu2204-amd64-20240522.1-en
resource tags

arch:amd64arch:i386image:ubuntu2204-amd64-20240522.1-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
submitted
23/07/2024, 17:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
Size

6.8MB
MD5

1eb9971aba0fe0e99a90bd40b202250f
SHA1

0c98f24d8caf5cd5ab5c883fd7f073d66f9bfec2
SHA256

10536ecb2fc08b2ebf96b22526f6880d79ef4cb2dacc2b3498955a1671c4dca9
SHA512

d6ecf529ca422a06168c9bd5aa08d2049590429e82a2cc2f5c798d4fea7530f22e7659454319527594ea3de082a60e786e1d23cb7cda589f2fb0f2f290e3e508
SSDEEP

196608:CWRuNL211RuEV/ooOFedAmfM3fzKsCs4lDmPDEBpvuHIyVQFEl1TbMtvvuKl/qJJ:CCu0rV/oxMMblFVQFCIvGKl/qJlQJlK9

Score

6^/10

antivm

Malware Config

Signatures

Enumerates active TCP sockets 1 TTPs 1 IoCs

Gets active TCP sockets from /proc virtual filesystem.

System Network Connections Discovery

T1049

description	ioc	Process
File opened for reading	/proc/net/tcp	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c

Enumerates running processes
Discovers information about currently running processes on the system

Changes its process name 15 IoCs

description	pid
Changes the process name, possibly in an attempt to hide itself	1553
Changes the process name, possibly in an attempt to hide itself	1554
Changes the process name, possibly in an attempt to hide itself	1555
Changes the process name, possibly in an attempt to hide itself	1573
Changes the process name, possibly in an attempt to hide itself	1574
Changes the process name, possibly in an attempt to hide itself	1577
Changes the process name, possibly in an attempt to hide itself	1576
Changes the process name, possibly in an attempt to hide itself	1598
Changes the process name, possibly in an attempt to hide itself	1599
Changes the process name, possibly in an attempt to hide itself	1615
Changes the process name, possibly in an attempt to hide itself	1616
Changes the process name, possibly in an attempt to hide itself	1671
Changes the process name, possibly in an attempt to hide itself	1672
Changes the process name, possibly in an attempt to hide itself	1685
Changes the process name, possibly in an attempt to hide itself	1686

Checks CPU configuration 1 TTPs 1 IoCs

Checks CPU information which indicate if the system is a virtual machine.

antivm

Virtualization/Sandbox Evasion

T1497

description	ioc	Process
File opened for reading	/proc/cpuinfo	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c

Reads CPU attributes 1 TTPs 1 IoCs

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/devices/system/cpu/cpu0/cpufreq/scaling_cur_freq	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c

Reads system network configuration 1 TTPs 2 IoCs

Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/tcp	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/net/udp	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c

Enumerates kernel/hardware configuration 1 TTPs 9 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/class/net	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/sys/fs/cgroup/cpu.max	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/sys/block/dm-0/queue/rotational	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/sys/block/mqueue/queue/rotational	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/sys/block/vda/queue/rotational	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/sys/fs/cgroup/system.slice/agent.service/cpu.max	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/sys/fs/cgroup/system.slice/cpu.max	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/sys/block/devpts/queue/rotational	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/sys/block/hugetlbfs/queue/rotational	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c

Reads runtime system information 64 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/1195/io	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1324/environ	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/864/cmdline	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1013/task/1032/environ	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1076/task/1079/cmdline	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1100/stat	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1436/task/1438/status	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1556/statm	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/594/environ	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1188/task/1201/io	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1197/task/1225/io	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1243/task/1245/cmdline	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1080/task/1081/statm	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1186/task/1198/cmdline	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1283/cmdline	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1350/task/1353/stat	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/167/stat	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/841/task/865/stat	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1085/task/1086/statm	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1163/task/1178/statm	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1324/task/1332/environ	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/73/stat	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/79/task	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/590/environ	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1243/task/1413/cmdline	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1188/task/1201/status	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1248/task/1249/environ	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1291/task	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1324/task/1328/cmdline	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/99/status	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1013/task/1021/environ	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1054/task/1090/environ	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1144/io	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1367/stat	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1449/stat	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1557/stat	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/79/status	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/610/task/614/io	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1044/task/1048/environ	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1248/task/1252/statm	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/5/task	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/11/stat	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1058/task/1105/statm	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1162/environ	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1162/task/1210/stat	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/19/status	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/25/stat	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/632/task/659/environ	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1115/task/1118/statm	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1013/io	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1175/task/1184/stat	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1227/task/1234/status	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/660/task/678/io	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/984/task	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1054/task/1088/statm	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1231/task/1242/status	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1243/status	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1449/task/1451/cmdline	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/26/cmdline	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1067/stat	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1080/statm	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1100/statm	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1144/task/1154/status	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
File opened for reading	/proc/1256/task/1311/io	e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c

/tmp/e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
/tmp/e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c
1⤵
- Enumerates active TCP sockets
- Checks CPU configuration
- Reads CPU attributes
- Reads system network configuration
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:1551
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1575
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1575
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1575
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1575
- /sbin/iptables
  iptables --version
  2⤵
  PID:1575
- /bin/iptables
  iptables --version
  2⤵
  PID:1575
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1575
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1584
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1584
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1584
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1584
- /sbin/iptables
  iptables --version
  2⤵
  PID:1584
- /bin/iptables
  iptables --version
  2⤵
  PID:1584
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1584
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1585
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1585
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1585
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1585
- /sbin/iptables
  iptables --version
  2⤵
  PID:1585
- /bin/iptables
  iptables --version
  2⤵
  PID:1585
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1585
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1586
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1586
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1586
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1586
- /sbin/iptables
  iptables --version
  2⤵
  PID:1586
- /bin/iptables
  iptables --version
  2⤵
  PID:1586
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1586
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1587
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1587
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1587
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1587
- /sbin/iptables
  iptables --version
  2⤵
  PID:1587
- /bin/iptables
  iptables --version
  2⤵
  PID:1587
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1587
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1589
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1589
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1589
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1589
- /sbin/iptables
  iptables --version
  2⤵
  PID:1589
- /bin/iptables
  iptables --version
  2⤵
  PID:1589
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1589
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1592
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1592
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1592
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1592
- /sbin/iptables
  iptables --version
  2⤵
  PID:1592
- /bin/iptables
  iptables --version
  2⤵
  PID:1592
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1592
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1593
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1593
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1593
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1593
- /sbin/iptables
  iptables --version
  2⤵
  PID:1593
- /bin/iptables
  iptables --version
  2⤵
  PID:1593
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1593
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1594
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1594
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1594
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1594
- /sbin/iptables
  iptables --version
  2⤵
  PID:1594
- /bin/iptables
  iptables --version
  2⤵
  PID:1594
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1594
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1595
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1595
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1595
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1595
- /sbin/iptables
  iptables --version
  2⤵
  PID:1595
- /bin/iptables
  iptables --version
  2⤵
  PID:1595
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1595
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1596
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1596
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1596
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1596
- /sbin/iptables
  iptables --version
  2⤵
  PID:1596
- /bin/iptables
  iptables --version
  2⤵
  PID:1596
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1596
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1597
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1597
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1597
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1597
- /sbin/iptables
  iptables --version
  2⤵
  PID:1597
- /bin/iptables
  iptables --version
  2⤵
  PID:1597
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1597
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1600
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1600
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1600
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1600
- /sbin/iptables
  iptables --version
  2⤵
  PID:1600
- /bin/iptables
  iptables --version
  2⤵
  PID:1600
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1600
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1601
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1601
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1601
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1601
- /sbin/iptables
  iptables --version
  2⤵
  PID:1601
- /bin/iptables
  iptables --version
  2⤵
  PID:1601
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1601
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1602
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1602
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1602
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1602
- /sbin/iptables
  iptables --version
  2⤵
  PID:1602
- /bin/iptables
  iptables --version
  2⤵
  PID:1602
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1602
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1603
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1603
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1603
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1603
- /sbin/iptables
  iptables --version
  2⤵
  PID:1603
- /bin/iptables
  iptables --version
  2⤵
  PID:1603
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1603
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1604
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1604
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1604
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1604
- /sbin/iptables
  iptables --version
  2⤵
  PID:1604
- /bin/iptables
  iptables --version
  2⤵
  PID:1604
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1604
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1605
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1605
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1605
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1605
- /sbin/iptables
  iptables --version
  2⤵
  PID:1605
- /bin/iptables
  iptables --version
  2⤵
  PID:1605
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1605
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1606
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1606
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1606
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1606
- /sbin/iptables
  iptables --version
  2⤵
  PID:1606
- /bin/iptables
  iptables --version
  2⤵
  PID:1606
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1606
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1607
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1607
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1607
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1607
- /sbin/iptables
  iptables --version
  2⤵
  PID:1607
- /bin/iptables
  iptables --version
  2⤵
  PID:1607
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1607
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1608
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1608
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1608
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1608
- /sbin/iptables
  iptables --version
  2⤵
  PID:1608
- /bin/iptables
  iptables --version
  2⤵
  PID:1608
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1608
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1609
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1609
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1609
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1609
- /sbin/iptables
  iptables --version
  2⤵
  PID:1609
- /bin/iptables
  iptables --version
  2⤵
  PID:1609
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1609
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1610
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1610
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1610
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1610
- /sbin/iptables
  iptables --version
  2⤵
  PID:1610
- /bin/iptables
  iptables --version
  2⤵
  PID:1610
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1610
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1611
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1611
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1611
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1611
- /sbin/iptables
  iptables --version
  2⤵
  PID:1611
- /bin/iptables
  iptables --version
  2⤵
  PID:1611
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1611
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1617
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1617
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1617
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1617
- /sbin/iptables
  iptables --version
  2⤵
  PID:1617
- /bin/iptables
  iptables --version
  2⤵
  PID:1617
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1617
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1618
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1618
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1618
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1618
- /sbin/iptables
  iptables --version
  2⤵
  PID:1618
- /bin/iptables
  iptables --version
  2⤵
  PID:1618
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1618
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1619
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1619
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1619
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1619
- /sbin/iptables
  iptables --version
  2⤵
  PID:1619
- /bin/iptables
  iptables --version
  2⤵
  PID:1619
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1619
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1620
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1620
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1620
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1620
- /sbin/iptables
  iptables --version
  2⤵
  PID:1620
- /bin/iptables
  iptables --version
  2⤵
  PID:1620
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1620
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1621
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1621
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1621
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1621
- /sbin/iptables
  iptables --version
  2⤵
  PID:1621
- /bin/iptables
  iptables --version
  2⤵
  PID:1621
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1621
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1622
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1622
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1622
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1622
- /sbin/iptables
  iptables --version
  2⤵
  PID:1622
- /bin/iptables
  iptables --version
  2⤵
  PID:1622
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1622
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1623
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1623
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1623
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1623
- /sbin/iptables
  iptables --version
  2⤵
  PID:1623
- /bin/iptables
  iptables --version
  2⤵
  PID:1623
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1623
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1624
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1624
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1624
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1624
- /sbin/iptables
  iptables --version
  2⤵
  PID:1624
- /bin/iptables
  iptables --version
  2⤵
  PID:1624
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1624
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1625
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1625
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1625
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1625
- /sbin/iptables
  iptables --version
  2⤵
  PID:1625
- /bin/iptables
  iptables --version
  2⤵
  PID:1625
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1625
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1626
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1626
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1626
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1626
- /sbin/iptables
  iptables --version
  2⤵
  PID:1626
- /bin/iptables
  iptables --version
  2⤵
  PID:1626
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1626
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1627
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1627
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1627
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1627
- /sbin/iptables
  iptables --version
  2⤵
  PID:1627
- /bin/iptables
  iptables --version
  2⤵
  PID:1627
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1627
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1670
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1670
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1670
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1670
- /sbin/iptables
  iptables --version
  2⤵
  PID:1670
- /bin/iptables
  iptables --version
  2⤵
  PID:1670
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1670
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1673
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1673
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1673
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1673
- /sbin/iptables
  iptables --version
  2⤵
  PID:1673
- /bin/iptables
  iptables --version
  2⤵
  PID:1673
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1673
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1674
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1674
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1674
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1674
- /sbin/iptables
  iptables --version
  2⤵
  PID:1674
- /bin/iptables
  iptables --version
  2⤵
  PID:1674
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1674
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1675
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1675
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1675
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1675
- /sbin/iptables
  iptables --version
  2⤵
  PID:1675
- /bin/iptables
  iptables --version
  2⤵
  PID:1675
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1675
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1676
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1676
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1676
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1676
- /sbin/iptables
  iptables --version
  2⤵
  PID:1676
- /bin/iptables
  iptables --version
  2⤵
  PID:1676
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1676
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1677
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1677
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1677
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1677
- /sbin/iptables
  iptables --version
  2⤵
  PID:1677
- /bin/iptables
  iptables --version
  2⤵
  PID:1677
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1677
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1678
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1678
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1678
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1678
- /sbin/iptables
  iptables --version
  2⤵
  PID:1678
- /bin/iptables
  iptables --version
  2⤵
  PID:1678
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1678
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1679
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1679
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1679
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1679
- /sbin/iptables
  iptables --version
  2⤵
  PID:1679
- /bin/iptables
  iptables --version
  2⤵
  PID:1679
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1679
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1680
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1680
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1680
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1680
- /sbin/iptables
  iptables --version
  2⤵
  PID:1680
- /bin/iptables
  iptables --version
  2⤵
  PID:1680
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1680
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1681
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1681
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1681
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1681
- /sbin/iptables
  iptables --version
  2⤵
  PID:1681
- /bin/iptables
  iptables --version
  2⤵
  PID:1681
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1681
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1682
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1682
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1682
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1682
- /sbin/iptables
  iptables --version
  2⤵
  PID:1682
- /bin/iptables
  iptables --version
  2⤵
  PID:1682
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1682
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1683
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1683
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1683
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1683
- /sbin/iptables
  iptables --version
  2⤵
  PID:1683
- /bin/iptables
  iptables --version
  2⤵
  PID:1683
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1683
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1684
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1684
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1684
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1684
- /sbin/iptables
  iptables --version
  2⤵
  PID:1684
- /bin/iptables
  iptables --version
  2⤵
  PID:1684
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1684
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1687
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1687
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1687
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1687
- /sbin/iptables
  iptables --version
  2⤵
  PID:1687
- /bin/iptables
  iptables --version
  2⤵
  PID:1687
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1687
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1688
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1688
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1688
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1688
- /sbin/iptables
  iptables --version
  2⤵
  PID:1688
- /bin/iptables
  iptables --version
  2⤵
  PID:1688
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1688
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1689
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1689
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1689
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1689
- /sbin/iptables
  iptables --version
  2⤵
  PID:1689
- /bin/iptables
  iptables --version
  2⤵
  PID:1689
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1689
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1690
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1690
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1690
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1690
- /sbin/iptables
  iptables --version
  2⤵
  PID:1690
- /bin/iptables
  iptables --version
  2⤵
  PID:1690
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1690
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1691
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1691
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1691
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1691
- /sbin/iptables
  iptables --version
  2⤵
  PID:1691
- /bin/iptables
  iptables --version
  2⤵
  PID:1691
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1691
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1692
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1692
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1692
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1692
- /sbin/iptables
  iptables --version
  2⤵
  PID:1692
- /bin/iptables
  iptables --version
  2⤵
  PID:1692
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1692
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1693
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1693
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1693
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1693
- /sbin/iptables
  iptables --version
  2⤵
  PID:1693
- /bin/iptables
  iptables --version
  2⤵
  PID:1693
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1693
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1694
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1694
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1694
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1694
- /sbin/iptables
  iptables --version
  2⤵
  PID:1694
- /bin/iptables
  iptables --version
  2⤵
  PID:1694
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1694
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1695
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1695
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1695
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1695
- /sbin/iptables
  iptables --version
  2⤵
  PID:1695
- /bin/iptables
  iptables --version
  2⤵
  PID:1695
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1695
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1696
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1696
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1696
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1696
- /sbin/iptables
  iptables --version
  2⤵
  PID:1696
- /bin/iptables
  iptables --version
  2⤵
  PID:1696
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1696
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1697
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1697
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1697
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1697
- /sbin/iptables
  iptables --version
  2⤵
  PID:1697
- /bin/iptables
  iptables --version
  2⤵
  PID:1697
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1697
- /usr/local/sbin/iptables
  iptables --version
  2⤵
  PID:1698
- /usr/local/bin/iptables
  iptables --version
  2⤵
  PID:1698
- /usr/sbin/iptables
  iptables --version
  2⤵
  PID:1698
- /usr/bin/iptables
  iptables --version
  2⤵
  PID:1698
- /sbin/iptables
  iptables --version
  2⤵
  PID:1698
- /bin/iptables
  iptables --version
  2⤵
  PID:1698
- /snap/bin/iptables
  iptables --version
  2⤵
  PID:1698

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1497

Credential Access

Discovery

System Information Discovery

T1082

System Network Configuration Discovery

T1016

System Network Connections Discovery

T1049

Virtualization/Sandbox Evasion

T1497

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads