General
-
Target
5ca4a9f6553fea64ad2c724bf71d0fac2b372f9e7ce2200814c98aac647172fb
-
Size
6.6MB
-
Sample
220817-q62meabdc8
-
MD5
3a9cdd8a5cbc3ab10ad64c4bb641b41f
-
SHA1
e45f89c923d0361ce8f9c64a63031860a76b2d10
-
SHA256
5ca4a9f6553fea64ad2c724bf71d0fac2b372f9e7ce2200814c98aac647172fb
-
SHA512
2d1d26081637c925fb6ae5f92b278f87a8253fd65a75c44fdc2c513a24dc9e0658c552ebc9c9c76c70ad948c60901e682184a833aae51a8c4d6220e883e05aef
-
SSDEEP
49152:hPyt5H89G+YrbjVWMiUMNqb054dzNIdEp+rt1D5TvLlcpigaB5IDPmoFjPnMBbs0:hqHaQKNzVLlhLopfMlsnh8K54
Behavioral task
behavioral1
Sample
5ca4a9f6553fea64ad2c724bf71d0fac2b372f9e7ce2200814c98aac647172fb
Resource
ubuntu1804-amd64-en-20211208
Malware Config
Extracted
wellmess
http://141.98.212.55:53
https://209.58.186.196:443
Targets
-
-
Target
5ca4a9f6553fea64ad2c724bf71d0fac2b372f9e7ce2200814c98aac647172fb
-
Size
6.6MB
-
MD5
3a9cdd8a5cbc3ab10ad64c4bb641b41f
-
SHA1
e45f89c923d0361ce8f9c64a63031860a76b2d10
-
SHA256
5ca4a9f6553fea64ad2c724bf71d0fac2b372f9e7ce2200814c98aac647172fb
-
SHA512
2d1d26081637c925fb6ae5f92b278f87a8253fd65a75c44fdc2c513a24dc9e0658c552ebc9c9c76c70ad948c60901e682184a833aae51a8c4d6220e883e05aef
-
SSDEEP
49152:hPyt5H89G+YrbjVWMiUMNqb054dzNIdEp+rt1D5TvLlcpigaB5IDPmoFjPnMBbs0:hqHaQKNzVLlhLopfMlsnh8K54
Score7/10-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Reads runtime system information
Reads data from /proc virtual filesystem.
-