Analysis
-
max time kernel
0s -
max time network
117s -
platform
linux_amd64 -
resource
ubuntu1804-amd64-en-20211208 -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
01-12-2022 03:52
Static task
static1
Behavioral task
behavioral1
Sample
sample-1:d3d3fb58213c779a72bf69efca4a5d15
Resource
ubuntu1804-amd64-en-20211208
ubuntu-18.04-amd64
2 signatures
150 seconds
General
-
Target
sample-1:d3d3fb58213c779a72bf69efca4a5d15
-
Size
69KB
-
MD5
d3d3fb58213c779a72bf69efca4a5d15
-
SHA1
5a9b065b0b50088a40b1fe52c0ad417763b041b9
-
SHA256
107e42ddbc5d0e31f836bc6c1d96530a44a3362d32168278fbd012313eb08230
-
SHA512
8f84d6c079506171733bd21b6b194dd5491bad14386ac1fb3e15eea9d5e7fef7dc6f14d71856c3121620aa70be02c5fdf28fe13edeb724f5048fc7a208b39470
-
SSDEEP
1536:PQnNoWGxGd6ghNkh0V2HvztuoMO4UFneTZJ4zJC+3R:P8No2dPhW6UtuoMOdlgZJ4zcCR
Score
7/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
Processes:
sample-1:d3d3fb58213c779a72bf69efca4a5d15description ioc process /proc/net/route /proc/net/route sample-1:d3d3fb58213c779a72bf69efca4a5d15 -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes:
sample-1:d3d3fb58213c779a72bf69efca4a5d15description ioc process /proc/net/route /proc/net/route sample-1:d3d3fb58213c779a72bf69efca4a5d15