ff6ffc93f734b01224cf950abb209056a692e38ce1b599a107cc53c1cbd94f1e | Triage

Analysis

max time kernel
1s
max time network
1078s
platform
ubuntu-20.04_amd64
resource
ubuntu2004-amd64-20240508-en
resource tags

arch:amd64arch:i386image:ubuntu2004-amd64-20240508-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system
submitted
12/09/2024, 14:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

Outline-Manager.appimage
Size

104.5MB
MD5

1fe1eb7e6a15d81b80f135c4f63c5079
SHA1

bcbfc11360616a696f515bf49898f15b1e3be5a4
SHA256

ff6ffc93f734b01224cf950abb209056a692e38ce1b599a107cc53c1cbd94f1e
SHA512

0fff9e3957338c58ea0f5f3fef3744c337ffb8f88a61b9c3d50b6c963e47e37dde26a63f0247f82a1ec9582bd20dae690a3d17cc7a0cc5c268bafaad4ba3eeee
SSDEEP

3145728:CvN/CeaSpWT0FZLBd2CmFQHMDKDrFLPck7Jrfni/:CvNTaSq0FZVJli8BLPcUZnU

Score

4^/10

discovery

Malware Config

Signatures

Changes its process name 1 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	outline-manager	1401	outline-manager

Reads runtime system information 2 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	Outline-Manager.appimage
File opened for reading	/proc/filesystems	outline-manager

/tmp/Outline-Manager.appimage
/tmp/Outline-Manager.appimage
1⤵
- Reads runtime system information
PID:1401

/tmp/.mount_OutlinqBtHB8/AppRun
/tmp/Outline-Manager.appimage
1⤵
PID:1401

/tmp/.mount_OutlinqBtHB8/outline-manager
/tmp/.mount_OutlinqBtHB8/outline-manager
1⤵
- Changes its process name
- Reads runtime system information
PID:1401

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads