Analysis
-
max time kernel
0s -
max time network
154s -
platform
linux_amd64 -
resource
ubuntu1804-amd64-en-20211208 -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
29-11-2022 13:23
Static task
static1
Behavioral task
behavioral1
Sample
l.out.elf
Resource
ubuntu1804-amd64-en-20211208
ubuntu-18.04-amd64
3 signatures
150 seconds
General
-
Target
l.out.elf
-
Size
1.3MB
-
MD5
198ee9603903eee36f65de4d1fe6107c
-
SHA1
4549e8e41b742bd2888eed926d8389edbc3178e7
-
SHA256
44c4dc9352a5217111def571fe6be7777071ce8b3059697e224bac130442a88e
-
SHA512
ce681ce4820069070fc7c4594f1caf29054e7ce64e080b06daadadbe265f44e7888283c669e65ab3e4653e6117215afbacc24d9faa42cd9458aa6ade227131dd
-
SSDEEP
24576:3pHfCA9zTKrUXa5JTrMPnZz129Mbej/0RzZhstHm37BEYq7PrYB:3tCA9Da/TaZzk2a/09PslmrzqbrYB
Score
8/10
Malware Config
Signatures
-
Writes DNS configuration 1 TTPs 1 IoCs
Writes data to DNS resolver config file.
-
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
Processes:
l.out.elfdescription ioc process /proc/self/exe /proc/self/exe l.out.elf -
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes:
description ioc /tmp/l.out.elf /tmp/l.out.elf