Analysis
-
max time kernel
40814s -
max time network
151s -
platform
linux_amd64 -
resource
ubuntu1804-amd64-en-20211208 -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
26-03-2023 02:05
Behavioral task
behavioral1
Sample
05cb8d507a2ad6634c97bb6de28a091033967c8c800e4c67619a2f9d4fd45c40.elf
Resource
ubuntu1804-amd64-en-20211208
General
-
Target
05cb8d507a2ad6634c97bb6de28a091033967c8c800e4c67619a2f9d4fd45c40.elf
-
Size
124KB
-
MD5
f34a4a055792dfc137a30620c37ef056
-
SHA1
e845c65153a3b1280d26b25a9dfaff85c96ce3ad
-
SHA256
05cb8d507a2ad6634c97bb6de28a091033967c8c800e4c67619a2f9d4fd45c40
-
SHA512
7fda065e61a7398171cea18103ea7cec5069148dc55a95eca5a2a010ec112b7200ebd8b1009ea336d61d45c937cbf8bfd4fa6acaa64e07621421f407e1a22457
-
SSDEEP
3072:ZkWN08oIKxp7UvBLphajjGnOrtByHjqg9iumXhb1mbYe:poIKP2LphajjGny+Og9iumXhb1mbYe
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
Processes:
05cb8d507a2ad6634c97bb6de28a091033967c8c800e4c67619a2f9d4fd45c40.elfdescription ioc process /proc/net/route /proc/net/route 05cb8d507a2ad6634c97bb6de28a091033967c8c800e4c67619a2f9d4fd45c40.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes:
05cb8d507a2ad6634c97bb6de28a091033967c8c800e4c67619a2f9d4fd45c40.elfdescription ioc process /proc/net/route /proc/net/route 05cb8d507a2ad6634c97bb6de28a091033967c8c800e4c67619a2f9d4fd45c40.elf