Analysis
-
max time kernel
0s -
max time network
159s -
platform
linux_amd64 -
resource
ubuntu1804-amd64-en-20211208 -
submitted
21-06-2022 03:23
General
-
Target
308cefeeae83c3ef5500fa56f2e6dfb2f5e117f302bb970155c7b66c92386bf4
-
Size
111KB
-
MD5
e8ca1c8cbdcc73b6dd83e6b9e5e979f3
-
SHA1
d59e9ecae20afc2ef0d7686bfb21f435609ef885
-
SHA256
308cefeeae83c3ef5500fa56f2e6dfb2f5e117f302bb970155c7b66c92386bf4
-
SHA512
7098bd07009f5b8ca891f59bf217237ccf7580ed4f19d5499aeabd6687eb6070768cb75098655e236eca2dbb607402fa0fc4a90e54a98740b3f70c7ba4337863
Score
7/10
Malware Config
Signatures
-
Modifies rc script 1 TTPs 1 IoCs
Adding/modifying system rc scripts is a common persistence mechanism.
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
./308cefeeae83c3ef5500fa56f2e6dfb2f5e117f302bb970155c7b66c92386bf4./308cefeeae83c3ef5500fa56f2e6dfb2f5e117f302bb970155c7b66c92386bf41⤵
- Modifies rc script