Analysis
-
max time kernel
0s -
max time network
134s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20221111-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20221111-enkernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
21-03-2023 01:38
Behavioral task
behavioral1
Sample
2ce5eb2235aaf5476213a6dcdc7627524fd9a134b81dfda3e857b24f300ccc6d.elf
Resource
ubuntu1804-amd64-20221111-en
General
-
Target
2ce5eb2235aaf5476213a6dcdc7627524fd9a134b81dfda3e857b24f300ccc6d.elf
-
Size
91KB
-
MD5
a4ea13ef051384e3aac26c8bd3a2fb40
-
SHA1
532bf97ed3feb029c94763ce3abf2cf97dfa1e7c
-
SHA256
2ce5eb2235aaf5476213a6dcdc7627524fd9a134b81dfda3e857b24f300ccc6d
-
SHA512
274cf6b7e444435806ff75bc3d847d3ad17c70b7f1da07932ca704f4fefe2d39ebae03af770816e88a6cea9cf3095b9ddc9ff14640e6ef92cb237a871aa67d87
-
SSDEEP
1536:p7rHXokXsWFVSzkfLEkZAT5ipG5v3CphauH/VPNlDDUg6I9um2Xj5YZb0e:pcCPOkfQfNipGdCphaE/XVog99um2XFY
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
Processes:
2ce5eb2235aaf5476213a6dcdc7627524fd9a134b81dfda3e857b24f300ccc6d.elfdescription ioc process /proc/net/route /proc/net/route 2ce5eb2235aaf5476213a6dcdc7627524fd9a134b81dfda3e857b24f300ccc6d.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes:
2ce5eb2235aaf5476213a6dcdc7627524fd9a134b81dfda3e857b24f300ccc6d.elfdescription ioc process /proc/net/route /proc/net/route 2ce5eb2235aaf5476213a6dcdc7627524fd9a134b81dfda3e857b24f300ccc6d.elf