Analysis
-
max time kernel
0s -
max time network
151s -
platform
linux_amd64 -
resource
ubuntu1804-amd64-en-20211208 -
submitted
24-01-2022 02:39
Static task
static1
Behavioral task
behavioral1
Sample
fd3969d32398bbe3709e9da5f8326935dde664bbc36753bd41a0b111712c0950
Resource
ubuntu1804-amd64-en-20211208
linux_amd64
0 signatures
0 seconds
General
-
Target
fd3969d32398bbe3709e9da5f8326935dde664bbc36753bd41a0b111712c0950
-
Size
3.9MB
-
MD5
ae7a46529a0f74fb83beeb1ab2c68c5c
-
SHA1
a57c896486564d7663a4dce6fbf723a1deb81378
-
SHA256
fd3969d32398bbe3709e9da5f8326935dde664bbc36753bd41a0b111712c0950
-
SHA512
85cba60ab37b138c271da13f899ee61434f56b24fa611e294e614f608fb8cf8b912fc59e0e5cd03070f57d01efadddd689edbaa65962f7ccfa6c709bb9b8a470
Score
10/10
Malware Config
Signatures
-
suricata: ET MALWARE APT29/Wellness CnC Host Checkin
suricata: ET MALWARE APT29/Wellness CnC Host Checkin
-
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
Processes:
fd3969d32398bbe3709e9da5f8326935dde664bbc36753bd41a0b111712c0950description ioc process /proc/sys/net/core/somaxconn /proc/sys/net/core/somaxconn fd3969d32398bbe3709e9da5f8326935dde664bbc36753bd41a0b111712c0950