Building CAPEv2 — Automated Malware Analysis Sandbox — Part 3
Tags
| attack-pattern: | Data Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Tool - T1588.002 Hypervisor - T1062 Sudo - T1169 |
Common Information
| Type | Value |
|---|---|
| UUID | 0264caa7-98e6-4ded-8171-3670a072f924 |
| Fingerprint | 34211f7e39b38dc9 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Nov. 12, 2024, 2:31 p.m. |
| Added to db | Nov. 12, 2024, 3:45 p.m. |
| Last updated | Nov. 17, 2024, 6:50 p.m. |
| Headline | Building CAPEv2 — Automated Malware Analysis Sandbox — Part 3 |
| Title | Building CAPEv2 — Automated Malware Analysis Sandbox — Part 3 |
| Detected Hints/Tags/Attributes | 45/1/13 |
Source URLs
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 167 | ✔ | Cybersecurity on Medium | https://medium.com/feed/tag/cybersecurity | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 1 | disguise.py |
|
| Details | Domain | 1 | www.whoisxmlapi.com |
|
| Details | Domain | 2 | cape2.sh |
|
| Details | Domain | 1 | rooter.py |
|
| Details | Domain | 2 | y4nush.com |
|
| Details | File | 1 | disguise.py |
|
| Details | File | 1 | rooter.py |
|
| Details | md5 | 1 | 00d35f16da780121846ac5345e6fddd5 |
|
| Details | IPv4 | 262 | 192.168.1.1 |
|
| Details | IPv4 | 619 | 0.0.0.0 |
|
| Details | IPv4 | 1 | 192.168.122.100 |
|
| Details | IPv4 | 4 | 192.168.122.1 |
|
| Details | IPv4 | 1441 | 127.0.0.1 |