Automated Malware Analysis IOC Report for

Processes

Path

Cmdline

Malicious

/tmp/Jqj1JC6iTV

Details

PID:	5223
Target ID:	10
Parent PID:	5119
Name:	Jqj1JC6iTV
Path:	/tmp/Jqj1JC6iTV
Commandline:	/tmp/Jqj1JC6iTV
Size:	5773336
MD5:	0d6f61f82cf2f781c6eb0661071d42d9
Time:	22:53:57
Date:	04/12/2021

/tmp/Jqj1JC6iTV

n/a

Details

PID:	5225
Target ID:	11
Parent PID:	5223
Name:	Jqj1JC6iTV
Path:	/tmp/Jqj1JC6iTV
Commandline:	n/a
Size:	5773336
MD5:	0d6f61f82cf2f781c6eb0661071d42d9
Time:	22:53:58
Date:	04/12/2021

/tmp/Jqj1JC6iTV

n/a

Details

PID:	5226
Target ID:	12
Parent PID:	5223
Name:	Jqj1JC6iTV
Path:	/tmp/Jqj1JC6iTV
Commandline:	n/a
Size:	5773336
MD5:	0d6f61f82cf2f781c6eb0661071d42d9
Time:	22:53:58
Date:	04/12/2021

/tmp/Jqj1JC6iTV

n/a

Details

PID:	5229
Target ID:	13
Parent PID:	5226
Name:	Jqj1JC6iTV
Path:	/tmp/Jqj1JC6iTV
Commandline:	n/a
Size:	5773336
MD5:	0d6f61f82cf2f781c6eb0661071d42d9
Time:	22:53:58
Date:	04/12/2021

IPs

Domain

Country

Malicious

96.8.118.142

unknown

United States

Details

IP:	96.8.118.142
TargetID:	-1
Country:	United States
Countrycode:	USA
ASN number:	36352
ASN name:	AS-COLOCROSSINGUS
Private:	false

Signature Hits	Behavior Group	Mitre Attack
Detected TCP or UDP traffic on non-standard ports	Networking	Non-Standard Port
Connects to IPs without corresponding DNS lookups	Networking

109.202.202.202

unknown

Switzerland

Details

IP:	109.202.202.202
TargetID:	-1
Country:	Switzerland
Countrycode:	CHE
ASN number:	13030
ASN name:	INIT7CH
Private:	false

Signature Hits	Behavior Group	Mitre Attack
Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)	Networking
Connects to IPs without corresponding DNS lookups	Networking

91.189.91.43

unknown

United Kingdom

Details

IP:	91.189.91.43
TargetID:	-1
Country:	United Kingdom
Countrycode:	GBR
ASN number:	41231
ASN name:	CANONICAL-ASGB
Private:	false

Signature Hits	Behavior Group	Mitre Attack
Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)	Networking
Connects to IPs without corresponding DNS lookups	Networking

91.189.91.42

unknown

United Kingdom

Details

IP:	91.189.91.42
TargetID:	-1
Country:	United Kingdom
Countrycode:	GBR
ASN number:	41231
ASN name:	CANONICAL-ASGB
Private:	false

Signature Hits	Behavior Group	Mitre Attack
Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)	Networking
Connects to IPs without corresponding DNS lookups	Networking

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

IOC Report

Processes

IPs