Overview

overview

7

Static

static

1

URLScan

urlscan

1

http://5.230.132.167

ubuntu-24.04-amd64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    http://5.230.132.167
  • Sample260730-lzlv6afd82
Score
7/10
antivmcommand_and_controldiscoverylinux

Malware Config

Targets

    • Target
      http://5.230.132.167
    Score
    7/10
    antivmcommand_and_controldiscovery

    • Outbound SSH connection to public host

      SSH is used for remote access. This may indicate SSH host discovery, encrypted C2 traffic, or data exfiltration.

      command_and_control

    • Checks hardware identifiers (DMI)

      Checks DMI information which indicate if the system is a virtual machine.

      antivm

    • Reads hardware information

      Accesses system info like serial numbers, manufacturer names etc.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks