Resubmissions
17-08-2022 13:53
220817-q62meabdc8 1021-07-2022 15:46
220721-s7pqcageb5 1024-01-2022 04:58
220124-fl3c4acdfj 5Analysis
-
max time kernel
0s -
max time network
142s -
platform
linux_amd64 -
resource
ubuntu1804-amd64-en-20211208 -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
17-08-2022 13:53
Behavioral task
behavioral1
Sample
5ca4a9f6553fea64ad2c724bf71d0fac2b372f9e7ce2200814c98aac647172fb
Resource
ubuntu1804-amd64-en-20211208
ubuntu-18.04-amd64
2 signatures
150 seconds
General
-
Target
5ca4a9f6553fea64ad2c724bf71d0fac2b372f9e7ce2200814c98aac647172fb
-
Size
6.6MB
-
MD5
3a9cdd8a5cbc3ab10ad64c4bb641b41f
-
SHA1
e45f89c923d0361ce8f9c64a63031860a76b2d10
-
SHA256
5ca4a9f6553fea64ad2c724bf71d0fac2b372f9e7ce2200814c98aac647172fb
-
SHA512
2d1d26081637c925fb6ae5f92b278f87a8253fd65a75c44fdc2c513a24dc9e0658c552ebc9c9c76c70ad948c60901e682184a833aae51a8c4d6220e883e05aef
Score
7/10
Malware Config
Signatures
-
Unexpected DNS network traffic destination 5 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
description ioc Destination IP 141.98.212.55 Destination IP 141.98.212.55 Destination IP 141.98.212.55 Destination IP 141.98.212.55 Destination IP 141.98.212.55 -
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
description ioc Process /proc/sys/net/core/somaxconn /proc/sys/net/core/somaxconn 5ca4a9f6553fea64ad2c724bf71d0fac2b372f9e7ce2200814c98aac647172fb