Analysis
-
max time kernel
4018s -
max time network
119s -
platform
linux_amd64 -
resource
ubuntu1804-amd64-en-20211208 -
submitted
24-01-2022 04:31
Static task
static1
Behavioral task
behavioral1
Sample
7c39841ba409bce4c2c35437ecf043f22910984325c70b9530edf15d826147ee
Resource
ubuntu1804-amd64-en-20211208
linux_amd64
0 signatures
0 seconds
General
-
Target
7c39841ba409bce4c2c35437ecf043f22910984325c70b9530edf15d826147ee
-
Size
6.4MB
-
MD5
4d38ac3319b167f6c8acb16b70297111
-
SHA1
01a71390892fad77987aa09a630b04ff72e37d5d
-
SHA256
7c39841ba409bce4c2c35437ecf043f22910984325c70b9530edf15d826147ee
-
SHA512
aaae4d94f5a1b75917b2c948d4517928b457da0851f65a196b91f30ccd88645a1066b7111db6f7f2267092f8299520044cfcf4400f8285b01db6b309c3dc26c8
Score
10/10
Malware Config
Signatures
-
suricata: ET MALWARE APT29/WellMess CnC Activity
suricata: ET MALWARE APT29/WellMess CnC Activity
-
suricata: ET MALWARE APT29/Wellness CnC Host Checkin
suricata: ET MALWARE APT29/Wellness CnC Host Checkin
-
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
Processes:
7c39841ba409bce4c2c35437ecf043f22910984325c70b9530edf15d826147eedescription ioc process /proc/sys/net/core/somaxconn /proc/sys/net/core/somaxconn 7c39841ba409bce4c2c35437ecf043f22910984325c70b9530edf15d826147ee