General
-
Target
ca8bd73a512db9d1e9bd5c342b64ae9bf892be900134aa8cb542d2f75e038ec5
-
Size
119KB
-
Sample
220521-qaq6ssccek
-
MD5
5aa59e83f80fbb56a5ff1a8d440eb4dd
-
SHA1
301cab7041a40ed09f6cf20db41db6dccc1a0595
-
SHA256
ca8bd73a512db9d1e9bd5c342b64ae9bf892be900134aa8cb542d2f75e038ec5
-
SHA512
201accc08f6ee06b0e893fac7ea3fe82e9c1f8ba278ba3a1119260d3e3e00d11d441b01f63d39ad8a327f41b3d4da505a7b2a73ef1a35b8cbf741d08e75b6b6c
Behavioral task
behavioral1
Sample
ca8bd73a512db9d1e9bd5c342b64ae9bf892be900134aa8cb542d2f75e038ec5
Resource
ubuntu1804-amd64-en-20211208
Malware Config
Targets
-
-
Target
ca8bd73a512db9d1e9bd5c342b64ae9bf892be900134aa8cb542d2f75e038ec5
-
Size
119KB
-
MD5
5aa59e83f80fbb56a5ff1a8d440eb4dd
-
SHA1
301cab7041a40ed09f6cf20db41db6dccc1a0595
-
SHA256
ca8bd73a512db9d1e9bd5c342b64ae9bf892be900134aa8cb542d2f75e038ec5
-
SHA512
201accc08f6ee06b0e893fac7ea3fe82e9c1f8ba278ba3a1119260d3e3e00d11d441b01f63d39ad8a327f41b3d4da505a7b2a73ef1a35b8cbf741d08e75b6b6c
Score9/10-
Contacts a large (23518) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Modifies the Watchdog daemon
Malware like Mirai modify the Watchdog to prevent it restarting an infected system.
-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration
Uses contents of /proc filesystem to enumerate network settings.
-