2882cbed0fb11c95d01b487a85338f4ec25fd44fc3f0936d68af4832d1be9a54

Resubmissions

05/02/2025, 11:06

250205-m7gf3svpcl 10

25/11/2024, 01:10

241125-bjt7gswjcj 10

Analysis

max time kernel
0s
max time network
2s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240508-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240508-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
05/02/2025, 11:06

Sharing

Copy URL

Twitter E-mail

Reason

Payload did not run: payload error: fork/exec /tmp/ransom.zip: exec format error

Report Analysis Logs

General

Target

ransom.zip
Size

831KB
MD5

7cd61bf217379a23bf42b1f9d08affab
SHA1

ac4cca1c691780cb6f33b476495b2fa30e00214b
SHA256

2882cbed0fb11c95d01b487a85338f4ec25fd44fc3f0936d68af4832d1be9a54
SHA512

e408d2f8bcad00448cacbc38bc747a83c4b23f484e789d129f110a51ffae417e644ae1b48350942630cbb12b3616480f73875afd55668b1b380af4606e40e44f
SSDEEP

24576:RyS4x8Uhh9cBLMfwp0zhbWA/7rYQXYJpD7r1OGKoW4XH:Y5xTHhhhnZYPhPH

Score

3^/10

discovery

Malware Config

Signatures

System Network Configuration Discovery 1 TTPs 1 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
1507	ransom.zip

/tmp/ransom.zip
/tmp/ransom.zip dsrm -subtree -noprompt -c "user\"http://+:443\""
1⤵
- System Network Configuration Discovery
PID:1507

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...

Resubmissions

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads