Analysis
-
max time kernel
11392s -
max time network
151s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20221111-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20221111-enkernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
23-03-2023 14:42
Behavioral task
behavioral1
Sample
okamiii.x86.elf
Resource
ubuntu1804-amd64-20221111-en
ubuntu-18.04-amd64
1 signatures
150 seconds
General
-
Target
okamiii.x86.elf
-
Size
110KB
-
MD5
50ccf934c9e500784ff815c53fec5c77
-
SHA1
c47f29927276afa85175b7d6cad176a0b7bbf46d
-
SHA256
c357ef99e64362676448206b3b5e9d77127345bec9168e078f11468745e37fec
-
SHA512
e9ba66e56b223336a32566b9e74219770b00a9803ca3c9f7546d7edeae0c11cf4a5cfdced201813c6a504b08d86c250864293c61edafdeb5e59a56495e6ca5a8
-
SSDEEP
3072:wLkNh9TyMKq0fQfoOR1JciHSb0JQtphavFWx+DegRWX8GO0FkNc:LwJiHqRphavTDegRWX8GO0FkNc
Score
5/10
Malware Config
Signatures
-
Reads runtime system information 25 IoCs
Reads data from /proc virtual filesystem.
Processes:
description ioc /proc/401/ /proc/401/ /proc/406/ /proc/406/ /proc/410/ /proc/410/ /proc/415/ /proc/415/ /proc/599/exe /proc/599/exe /proc/404/ /proc/404/ /proc/405/ /proc/405/ /proc/407/ /proc/407/ /proc/408/ /proc/408/ /proc/409/ /proc/409/ /proc/414/ /proc/414/ /proc/418/ /proc/418/ /proc/419/ /proc/419/ /proc/413/ /proc/413/ /proc/416/maps /proc/416/maps /proc/417/ /proc/417/ /proc/420/exe /proc/420/exe /proc/420/ /proc/420/ /proc/400/ /proc/400/ /proc/402/ /proc/402/ /proc/403/ /proc/403/ /proc/411/ /proc/411/ /proc/412/ /proc/412/ /proc/416/ /proc/416/ /proc/416/exe /proc/416/exe