Analysis
-
max time kernel
0s -
max time network
48s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20221111-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20221111-enkernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
27-11-2022 17:44
Behavioral task
behavioral1
Sample
4aaa0b0d1ccb91b090df97a47b15536157f6f141cdce67867d339d0f01b3981d
Resource
ubuntu1804-amd64-20221111-en
ubuntu-18.04-amd64
5 signatures
150 seconds
General
-
Target
4aaa0b0d1ccb91b090df97a47b15536157f6f141cdce67867d339d0f01b3981d
-
Size
659KB
-
MD5
1d79488a09ef56ae2e60e1985b18e7a2
-
SHA1
0b25e8f36a9738bb4d2dd2cd711f1aa7213db517
-
SHA256
4aaa0b0d1ccb91b090df97a47b15536157f6f141cdce67867d339d0f01b3981d
-
SHA512
b77fda07473e8f3e7ff2a1e25bb556164e3fddb40fe791a0b96538dfcc766f96c6e15082dccc77e79fff73f34497d0c43643134a633ff8740bbc4a287ec0c91b
-
SSDEEP
12288:aBo9ETRNT9Wn1J0OhS18tDm8PCExfLZ9JCCpyvOH36ybCQ7YLVN1/lFkThVArw:aBo9ANo70OE8A8PCExfLZ/CTvQrKLd/Q
Score
7/10
Malware Config
Signatures
-
Modifies rc script 1 TTPs 12 IoCs
Adding/modifying system rc scripts is a common persistence mechanism.
Processes:
update-rc.ddescription ioc Process /etc/rc5.d/ /etc/rc5.d/ update-rc.d /etc/rc4.d/ /etc/rc4.d/ update-rc.d /etc/rc6.d/ /etc/rc6.d/ update-rc.d /etc/rc2.d/S90iycidrkhlc /etc/rc2.d/S90iycidrkhlc