3f04d3267f818beec7a5f29a7780282bdf862a71669230b796b77700a494b55d

Resubmissions

21/01/2025, 11:24 UTC

250121-nh1zvs1qak 10

10/01/2024, 21:28 UTC

240110-1ba63sgfdp 10

Analysis

max time kernel
0s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240508-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240508-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
21/01/2025, 11:24 UTC

Sharing

Copy URL

Twitter E-mail

Reason

Payload did not run: payload error: fork/exec /tmp/163.5.169.28.zip: exec format error

Report Analysis Logs

General

Target

163.5.169.28.zip
Size

3.4MB
MD5

791696c6bca812e4b443238fe3f9d336
SHA1

51e1eee80ddc458e38d8a8bace02f27ba49206bd
SHA256

3f04d3267f818beec7a5f29a7780282bdf862a71669230b796b77700a494b55d
SHA512

59ae4f46f85377333da911da93ed22ac28e5ec6b61bbf5b57ad2238290494fbf38b7c16ab994bd1cb69d0d3a48c0cc045dad40b377fc947b8d504bc95326ddfc
SSDEEP

98304:zZo6YOMbyKDMs7Lv0Wu0usBtdfx7HofyhQIM37ME:VobFeKDBvvL9Jy379

Score

3^/10

discovery

Malware Config

Signatures

System Network Configuration Discovery 1 TTPs 1 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
1508	163.5.169.28.zip

/tmp/163.5.169.28.zip
/tmp/163.5.169.28.zip sh "\$MOZILLA\\\\nPLUGIN" "%SIGILL%" "\"SIGTERM|DESTROY|SIGKILL\""
1⤵
- System Network Configuration Discovery
PID:1508

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.