Analysis
-
max time kernel
0s -
max time network
103s -
platform
linux_amd64 -
resource
ubuntu1804-amd64-en-20211208 -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
12-08-2022 07:13
Static task
static1
Behavioral task
behavioral1
Sample
c3e0ac6dff87420fed2e4f7b8b480b50
Resource
ubuntu1804-amd64-en-20211208
ubuntu-18.04-amd64
2 signatures
150 seconds
General
-
Target
c3e0ac6dff87420fed2e4f7b8b480b50
-
Size
66KB
-
MD5
c3e0ac6dff87420fed2e4f7b8b480b50
-
SHA1
8ee3e579971790541f4c1cda6912b6e73b7a7415
-
SHA256
fa5eb81125c91825d50a6be567bdadf41c1af5cb514f44480268dee3a0240828
-
SHA512
25a8e60ed3936f0c0990df05ae0d7f6d2c6bba60b64877469cd4b29f3bccb3045cf3eff679604bf65df63ec9951d9a08340aa4e2eb32537987861b8f8eac804d
Score
7/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
Processes:
c3e0ac6dff87420fed2e4f7b8b480b50description ioc process /proc/net/route /proc/net/route c3e0ac6dff87420fed2e4f7b8b480b50 -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes:
c3e0ac6dff87420fed2e4f7b8b480b50description ioc process /proc/net/route /proc/net/route c3e0ac6dff87420fed2e4f7b8b480b50