| URL: | e5a6ae085b6c43020dea230eb0c0ecc33a188227507da97b8ecc05eb8beace6.us-east-1.prod.service.minerva.devices.a2z.com%20a2z.com |
| Full analysis: | https://app.any.run/tasks/bd413496-c8c7-4d8f-8b3a-aaed9d19179a |
| Verdict: | Malicious activity |
| Analysis date: | June 10, 2024, 00:29:04 |
| OS: | Ubuntu 22.04.2 |
| Indicators: | |
| MD5: | 83B9B2DD4A59CE4A541391309C49681F |
| SHA1: | D7E0927C23308733BDBAE4ADDD29FE925CC4E403 |
| SHA256: | 3BDC53F16FC7CFBAB16CAFE7708BF7912FF29E1D4E39C27E95DB6FEE76BE5E83 |
| SSDEEP: | 3:1E30KgtGVAMqGBIfHQqFMvDIxS0TMtu3cFEXe:G9uZF2IxVA+O |
MALICIOUS
No malicious indicators.SUSPICIOUS
No suspicious indicators.INFO
No info indicators.
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
Total processes
215
Monitored processes
3
Malicious processes
0
Suspicious processes
0
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process |
|---|---|---|---|---|
| 12439 | systemctl --user --global is-enabled snap.snapd-desktop-integration.snapd-desktop-integration.service | /usr/bin/systemctl | — | snapd |
User: root Integrity Level: UNKNOWN Exit code: 0 | ||||
| 12440 | systemctl --user --global is-enabled snap.snapd-desktop-integration.snapd-desktop-integration.service | /usr/bin/systemctl | — | snapd |
User: root Integrity Level: UNKNOWN Exit code: 0 | ||||
| 12441 | systemctl --user --global is-enabled snap.snapd-desktop-integration.snapd-desktop-integration.service | /usr/bin/systemctl | — | snapd |
User: root Integrity Level: UNKNOWN Exit code: 0 | ||||
Executable files
0
Suspicious files
0
Text files
0
Unknown types
0
Dropped files
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
0
TCP/UDP connections
17
DNS requests
22
Threats
0
HTTP requests
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
— | — | 185.125.188.59:443 | api.snapcraft.io | Canonical Group Limited | GB | unknown |
— | — | 185.125.188.55:443 | api.snapcraft.io | Canonical Group Limited | GB | unknown |
— | — | 224.0.0.251:5353 | — | — | — | unknown |
— | — | 185.125.188.54:443 | api.snapcraft.io | Canonical Group Limited | GB | unknown |
— | — | 142.250.185.163:443 | clientservices.googleapis.com | GOOGLE | US | unknown |
— | — | 172.217.18.10:443 | safebrowsingohttpgateway.googleapis.com | GOOGLE | US | unknown |
— | — | 74.125.133.84:443 | accounts.google.com | — | — | unknown |
— | — | 239.255.255.250:1900 | — | — | — | unknown |
— | — | 151.101.65.91:443 | google-ohttp-relay-safebrowsing.fastly-edge.com | FASTLY | US | unknown |
— | — | 216.58.212.131:443 | update.googleapis.com | GOOGLE | US | unknown |
DNS requests
Domain | IP | Reputation |
|---|---|---|
api.snapcraft.io |
| unknown |
clientservices.googleapis.com |
| whitelisted |
safebrowsingohttpgateway.googleapis.com |
| unknown |
google-ohttp-relay-safebrowsing.fastly-edge.com |
| unknown |
113.100.168.192.in-addr.arpa |
| unknown |
accounts.google.com |
| shared |
google.com |
| whitelisted |
update.googleapis.com |
| unknown |
www.google.com |
| whitelisted |
optimizationguide-pa.googleapis.com |
| whitelisted |