Resubmissions
17/08/2022, 13:53
220817-q62meabdc81021/07/2022, 15:46
220721-s7pqcageb51024/01/2022, 04:58
220124-fl3c4acdfj5Analysis
- max time kernel
4019s - max time network
135s - platform
linux_amd64 - resource
ubuntu1804-amd64-en-20211208 - submitted
24/01/2022, 04:58
Static task
static1
Behavioral task
behavioral1
Sample
5ca4a9f6553fea64ad2c724bf71d0fac2b372f9e7ce2200814c98aac647172fb
Resource
ubuntu1804-amd64-en-20211208
0 signatures
0 seconds
General
- Target 5ca4a9f6553fea64ad2c724bf71d0fac2b372f9e7ce2200814c98aac647172fb
- Size 6.6MB
- Sample220124-fl3c4acdfj
- SHA256 5ca4a9f6553fea64ad2c724bf71d0fac2b372f9e7ce2200814c98aac647172fb
- MD5 3a9cdd8a5cbc3ab10ad64c4bb641b41f
- SHA1 e45f89c923d0361ce8f9c64a63031860a76b2d10
- SHA512 2d1d26081637c925fb6ae5f92b278f87a8253fd65a75c44fdc2c513a24dc9e0658c552ebc9c9c76c70ad948c60901e682184a833aae51a8c4d6220e883e05aef
- MD5 SHA1 SHA512
Score
7/10
Malware Config
Signatures
- Unexpected DNS network traffic destination 5 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
description ioc Destination IP 141.98.212.55 Destination IP 141.98.212.55 Destination IP 141.98.212.55 Destination IP 141.98.212.55 Destination IP 141.98.212.55 - Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
description ioc Process /proc/sys/net/core/somaxconn /proc/sys/net/core/somaxconn 5ca4a9f6553fea64ad2c724bf71d0fac2b372f9e7ce2200814c98aac647172fb