General
- Target abbd36ce95fb12a9cc0035438d9908afd0f4b97365b98b63d2c846d9924c3c05.elf
- Size 202KB
- Sample221117-cnz4zade35
- SHA256 abbd36ce95fb12a9cc0035438d9908afd0f4b97365b98b63d2c846d9924c3c05
- MD5 a2d70e7ab7dccf5efcc32b5bbfdecad9
- SHA1 e508b76bb30fcdcd32bca10ba4cd3dab8d902c32
- SHA512 149488b841dce83c5be8c403d4d5ddc40a15fda1f27f78759236cd5d3eb185633fc06456e939a75c16a3a5e4049c556a77699e9221eb92846d76d9e5b0cf31df
- SSDEEP 3072:MiYUS6JucnKCUl2xlE/tw6cJcCJVW3vWCfDJdHk:JtucnKCkyJc0VCtLJd
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Malware Config
Targets
-
- Target abbd36ce95fb12a9cc0035438d9908afd0f4b97365b98b63d2c846d9924c3c05.elf
- Size 202KB
- SHA256 abbd36ce95fb12a9cc0035438d9908afd0f4b97365b98b63d2c846d9924c3c05
- MD5 a2d70e7ab7dccf5efcc32b5bbfdecad9
- SHA1 e508b76bb30fcdcd32bca10ba4cd3dab8d902c32
- SHA512 149488b841dce83c5be8c403d4d5ddc40a15fda1f27f78759236cd5d3eb185633fc06456e939a75c16a3a5e4049c556a77699e9221eb92846d76d9e5b0cf31df
- SSDEEP 3072:MiYUS6JucnKCUl2xlE/tw6cJcCJVW3vWCfDJdHk:JtucnKCkyJc0VCtLJd
- MD5 SHA1 SHA512 SSDEEP
-
Attempts to identify hypervisor via CPU configuration
Checks CPU information for indicators that the system is a virtual machine.
-
Reads network interface configuration
Fetches information about one or more active network interfaces.
-
Enumerates kernel/hardware configuration
Reads contents of /sys virtual filesystem to enumerate system information.
-
Reads runtime system information
Reads data from /proc virtual filesystem.
-
Writes file to tmp directory
Malware often drops required files in the /tmp directory.