Analysis
-
max time kernel
0s -
max time network
103s -
platform
linux_amd64 -
resource
ubuntu1804-amd64-en-20211208 -
resource tags
-
submitted
03-12-2022 23:46
General
-
Target
73bbabc65f884f89653a156e432788b5541a169036d364c2d769f6053960351f
-
Size
84KB
-
MD5
0cda4f097a9b072f4dd8bf3ac6cf273a
-
SHA1
d3c4bd3ba3775af039bd30e47ca43ff6ca285297
-
SHA256
73bbabc65f884f89653a156e432788b5541a169036d364c2d769f6053960351f
-
SHA512
3a5c659cac487ab55271e9d1fb8857db49af049755c8b3fb1fb91f9321ad01b9dfe2c7e657cd34131df428b5d16fc0af5802403891b1a96a326b4470855f9667
-
SSDEEP
1536:QahOrhUNuV9NnkqnhhWMC8tOadBvwZoXRUqHekyN/1H5xuM8b/3d:Q5JxkqnhhWMhtOqcoXRUq+xN/1Zx2r3
Score
8/10
Malware Config
Signatures
-
Writes DNS configuration 1 TTPs 1 IoCs
Writes data to DNS resolver config file.
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/73bbabc65f884f89653a156e432788b5541a169036d364c2d769f6053960351f/tmp/73bbabc65f884f89653a156e432788b5541a169036d364c2d769f6053960351f1⤵