4e15af88aac65f1ac73a9ec2d18df57f44d37f19b38cc005f0b9daf4233d57ae

Analysis

max time kernel
0s
max time network
129s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240611-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240611-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
15/09/2024, 17:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

epigrass-1.5.1/Epigrass/epiplay2.py
Size

9KB
MD5

6d40eed91d48407562921993b3a0b2ec
SHA1

e1aaedfb628cb5b80234a6c64097c70ad9bf2e8d
SHA256

3f403af5d14065dabfd705ddcfc6a21b6ab339a70a5acd99889a46e0aa3319f8
SHA512

e07f8d14c33080b8bbd9a536429ebfb78134705640a03c38cbe70b0b1a50a19a1fe4fc46f9c69a380155e76bb063fb9b2b136d16261c4eda407e0a36101c2fbf
SSDEEP

192:7lsPNKYOTQmMeGJrg1xuYQvUVJuq7JXBcJUuj07:7sNKTQQGdgnuYQv5q7JyJK

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: Python 1 TTPs 4 IoCs

Execution via Python.

execution

Python

T1059.006

pid	Process
1506	python
1506	python
1506	python
1506	python

/tmp/epigrass-1.5.1/Epigrass/epiplay2.py
/tmp/epigrass-1.5.1/Epigrass/epiplay2.py
1⤵
PID:1506

/usr/local/sbin/python
python /tmp/epigrass-1.5.1/Epigrass/epiplay2.py
1⤵
- Command and Scripting Interpreter: Python
PID:1506

/usr/local/bin/python
python /tmp/epigrass-1.5.1/Epigrass/epiplay2.py
1⤵
- Command and Scripting Interpreter: Python
PID:1506

/usr/sbin/python
python /tmp/epigrass-1.5.1/Epigrass/epiplay2.py
1⤵
- Command and Scripting Interpreter: Python
PID:1506

/usr/bin/python
python /tmp/epigrass-1.5.1/Epigrass/epiplay2.py
1⤵
- Command and Scripting Interpreter: Python
PID:1506

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Python

T1059.006

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads