226f61fa6c3eb1c13755436539c889afd4f2235a537202e125f4b60f0815d097

Analysis

max time kernel
7s
max time network
131s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240729-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240729-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
17-10-2024 06:14

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

cobalt4.9/cobalt4.9/Server/TeamServerImage
Size

37.9MB
MD5

ae5afcfee8026674dc8f3b4f2da46c7f
SHA1

5499bacf564afd11fc95599827c2742a35fda64a
SHA256

fa0b9f181f3c676d2124d4a6d2be0a12fdad5da124b8d525b8c91d747288a781
SHA512

d7f047b65bda952217714ca7e2b008fd1305a126ace6194371fb772df82bf717ab021dead88e66499afe5026a94610affbbaec66ca43d3ed2ac0051d93dba51c
SSDEEP

786432:8OFQcHva5w7LCO5/1eJH9iGu8Q6rmanGDnk4CGMSDtEumgRfEuKND3T0XXq:qcHvfx1eHiWQ6rnnKnk4CGYvgRfFybTu

Score

4^/10

discovery

Malware Config

Signatures

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

discovery

Internet Connection Discovery

T1016.001

Processes:

TeamServerImage

description	ioc	Process
File opened for reading	/proc/net/if_inet6	TeamServerImage

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

discovery

Processes:

TeamServerImage

description	ioc	Process
File opened for reading	/proc/self/maps	TeamServerImage

/tmp/cobalt4.9/cobalt4.9/Server/TeamServerImage
/tmp/cobalt4.9/cobalt4.9/Server/TeamServerImage
1⤵
- Reads system network configuration
- Reads runtime system information
PID:2522

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads