Analysis
-
max time kernel
20308s -
max time network
155s -
platform
linux_amd64 -
resource
ubuntu1804-amd64-en-20211208 -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
31-07-2022 11:21
Behavioral task
behavioral1
Sample
f71969740bbe38b1788782ddf0f41a942032f82d62feb4b8a9994cd7f6e371fe
Resource
ubuntu1804-amd64-en-20211208
2 signatures
150 seconds
General
-
Target
f71969740bbe38b1788782ddf0f41a942032f82d62feb4b8a9994cd7f6e371fe
-
Size
91KB
-
MD5
c2bb469356bda78e407ce12a4987c7ed
-
SHA1
88e73d986d4b0b19789e4fe7c4a317b0ced9e6f2
-
SHA256
f71969740bbe38b1788782ddf0f41a942032f82d62feb4b8a9994cd7f6e371fe
-
SHA512
7ebd579dc1f83c9e7c92ac669b45b092cfb4a50bb67b125f22b27b0921bb78393c1475247cf8f50147fecf9842c0292359525f6d6d1243fa99475df61a0b3678
Score
6/10
Malware Config
Signatures
-
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process /tmp/f71969740bbe38b1788782ddf0f41a942032f82d62feb4b8a9994cd7f6e371fe /tmp/f71969740bbe38b1788782ddf0f41a942032f82d62feb4b8a9994cd7f6e371fe f71969740bbe38b1788782ddf0f41a942032f82d62feb4b8a9994cd7f6e371fe