Analysis
-
max time kernel
2207s -
max time network
135s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20221111-en -
resource tags
-
submitted
03-12-2022 23:39
General
-
Target
da641f86f81f6333f2730795de93ad2a25ab279a527b8b9e9122b934a730ab08
-
Size
84KB
-
MD5
d75ecc784b27c06d3d56c28f6560ec41
-
SHA1
8d4f1d20c0b55c4c22971837482b0b8a5e93480a
-
SHA256
da641f86f81f6333f2730795de93ad2a25ab279a527b8b9e9122b934a730ab08
-
SHA512
77c290c68b61a7f99dd1331d2427f14857fff72b81d1e5f4d510f758c91de4d82d2f0310840267bbcd1f3f041717cf8236ed8ecf0ce3a1a75bfb1c824d0f014f
-
SSDEEP
1536:QahOrhUNuV9NnkqnhhWMC8tOadBvwZoXRUqHekyN/1H5xuM8b/3d:Q5JxkqnhhWMhtOqcoXRUq+xN/1Zx2r3
Score
8/10
Malware Config
Signatures
-
Writes DNS configuration 1 TTPs 1 IoCs
Writes data to DNS resolver config file.
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/da641f86f81f6333f2730795de93ad2a25ab279a527b8b9e9122b934a730ab08/tmp/da641f86f81f6333f2730795de93ad2a25ab279a527b8b9e9122b934a730ab081⤵