Analysis
-
max time kernel
0s -
max time network
155s -
platform
linux_amd64 -
resource
ubuntu1804-amd64-en-20211208 -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
16-08-2022 11:18
Behavioral task
behavioral1
Sample
i586-20220816-1117
Resource
ubuntu1804-amd64-en-20211208
ubuntu-18.04-amd64
3 signatures
150 seconds
General
-
Target
i586-20220816-1117
-
Size
61KB
-
MD5
51908da10302f478e101fc8d27c250ca
-
SHA1
706de82795d4cbed7a51d2f5beec2f8150ebb8a6
-
SHA256
ab0df35e7866d8841fc8976de6ce56d2e90ed9af1f2602f2895628050dea63b8
-
SHA512
c8121cc15cb8628c946d68ee8592f1d8ffe05779b233094db0d47252cdad677c61e13ce2798afec3f3a1c14f52e418b0541ed589719692fbddfa7484248f2531
Score
9/10
Malware Config
Signatures
-
Contacts a large (23670) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes:
i586-20220816-1117description ioc process /tmp/i586-20220816-1117 /tmp/i586-20220816-1117 i586-20220816-1117