Analysis
-
max time kernel
0s -
max time network
102s -
platform
linux_amd64 -
resource
ubuntu1804-amd64-en-20211208 -
resource tags
-
submitted
03-12-2022 23:39
General
-
Target
8ec87dee13de3281d55f7d1d3b48115a0f5e4a41bfbef1ea08e496ac529829c8
-
Size
81KB
-
MD5
97db3f7676380f0baa3840ed5d5c1767
-
SHA1
4fe8efef8c2e7cc3bafee19da8b223daae2242a1
-
SHA256
8ec87dee13de3281d55f7d1d3b48115a0f5e4a41bfbef1ea08e496ac529829c8
-
SHA512
50b941340b705238c8f984072611ea8e39267b2a41a0828b892e92edb8090ebed58b92622974f0dec7410a80cc78199139e8154f254040dd4e7ec5cb78c186ec
-
SSDEEP
1536:mihlrshQNuVhNnUinhhWbCh+Kh0MqHekyN/1H5xuM8gya:mXhFlUinhhWbCh+ohq+xN/1Zx2gy
Score
8/10
Malware Config
Signatures
-
Writes DNS configuration 1 TTPs 1 IoCs
Writes data to DNS resolver config file.
-
Unexpected DNS network traffic destination 1 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Processes
-
/tmp/8ec87dee13de3281d55f7d1d3b48115a0f5e4a41bfbef1ea08e496ac529829c8/tmp/8ec87dee13de3281d55f7d1d3b48115a0f5e4a41bfbef1ea08e496ac529829c81⤵