9a065bd64cf7f9f4d1385bfd9df86325e03f8dd64d0a3af56cfd05a7b28c3247 | Triage

Resubmissions

04-12-2024 22:48

241204-2q8lka1mam 10

04-12-2024 22:47

241204-2qx5ts1lhk 10

04-12-2024 22:43

241204-2nbtta1kfr 10

04-12-2024 19:35

241204-yayvmstjbk 10

04-12-2024 19:22

241204-x3b1xaxjf1 10

Analysis

max time kernel
0s
max time network
131s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
04-12-2024 22:43

Sharing

Report Analysis Logs

General

Target

wertg.exe
Size

652KB
MD5

59db985c17a4ab06d3a0fbbb39ac045e
SHA1

2622da604c4be6f2b8ad06cb2fa55d412ba53ece
SHA256

9a065bd64cf7f9f4d1385bfd9df86325e03f8dd64d0a3af56cfd05a7b28c3247
SHA512

8a0a2bb31c37ea27aeaa5f9b1e5f5ce3a42cecca8bdddb00b622bb722c4d7a2e36442b7c628d17629974676278aa0703e1088984599cf216eb2ff6e6a2f995a4
SSDEEP

12288:n4/yrAlyQGlqrLFB8vT+RNinZ12sVNRgznu+Jbb0LrYsFPV0ZSYWaBfF+Nd5zKF:nMM4qskaNxm

Score

3^/10

discovery

Malware Config

Signatures

Reads runtime system information 3 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/self/fd	apt
File opened for reading	/proc/filesystems	dpkg

/usr/bin/apt
apt install "wine;" wine /tmp/wertg.exe
1⤵
- Reads runtime system information
PID:2867
- /usr/bin/dpkg
  /usr/bin/dpkg --print-foreign-architectures
  2⤵
  - Reads runtime system information
  PID:2869
- /usr/bin/dpkg
  /usr/bin/dpkg --print-foreign-architectures
  2⤵
  - Reads runtime system information
  PID:2870

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads