1625e84ac5368c1d97aa170cff5d262f8f8fabcdfaf3646777f985aa0da3b75b

Analysis

max time kernel
153s
max time network
103s
platform
linux_amd64
resource
ubuntu1804-amd64-en-20211208
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
04-06-2023 13:23

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0ca261719f3c7f760df837f9a1160c50
Size

257KB
MD5

0ca261719f3c7f760df837f9a1160c50
SHA1

876f0fc4300b0a16bb40d72fdb0ecf5e09e82f08
SHA256

1625e84ac5368c1d97aa170cff5d262f8f8fabcdfaf3646777f985aa0da3b75b
SHA512

26ab055164118c3e393b63b25692d6ae926bf3eab298ccc78c948dba8617744d3278bf8366284106e5e267f65d7b7c600cf19fbaf3b0eb2f2bd0827615c45eff
SSDEEP

6144:fKv0+AdVI6Ho5f/wbOFPa7WK4mMhZKcqk15eQ10IZz1OcI:yv0+AdyWOBfK4mMhZKjk15eQ10IZzMcI

Score

6^/10

Malware Config

Signatures

Enumerates running processes
Discovers information about currently running processes on the system

Reads runtime system information 64 IoCs

Reads data from /proc virtual filesystem.

Processes:

0ca261719f3c7f760df837f9a1160c50

description	ioc	process
File opened for reading	/proc/26/cmdline	0ca261719f3c7f760df837f9a1160c50
File opened for reading	/proc/10/maps
File opened for reading	/proc/170/cmdline	0ca261719f3c7f760df837f9a1160c50
File opened for reading	/proc/251/cmdline	0ca261719f3c7f760df837f9a1160c50
File opened for reading	/proc/23/cmdline
File opened for reading	/proc/29/maps
File opened for reading	/proc/31/maps
File opened for reading	/proc/30/cmdline	0ca261719f3c7f760df837f9a1160c50
File opened for reading	/proc/4/maps
File opened for reading	/proc/16/maps
File opened for reading	/proc/26/maps
File opened for reading	/proc/623/maps
File opened for reading	/proc/666/maps
File opened for reading	/proc/686/cmdline
File opened for reading	/proc/223/cmdline	0ca261719f3c7f760df837f9a1160c50
File opened for reading	/proc/85/maps
File opened for reading	/proc/155/cmdline
File opened for reading	/proc/163/cmdline
File opened for reading	/proc/251/cmdline
File opened for reading	/proc/581/maps
File opened for reading	/proc/2/cmdline
File opened for reading	/proc/418/cmdline
File opened for reading	/proc/458/cmdline
File opened for reading	/proc/589/cmdline
File opened for reading	/proc/624/maps
File opened for reading	/proc/27/maps
File opened for reading	/proc/341/cmdline
File opened for reading	/proc/613/cmdline
File opened for reading	/proc/636/cmdline
File opened for reading	/proc/3/cmdline
File opened for reading	/proc/21/maps
File opened for reading	/proc/98/maps
File opened for reading	/proc/155/maps
File opened for reading	/proc/115/cmdline	0ca261719f3c7f760df837f9a1160c50
File opened for reading	/proc/84/cmdline
File opened for reading	/proc/154/cmdline
File opened for reading	/proc/447/maps
File opened for reading	/proc/115/maps
File opened for reading	/proc/192/cmdline
File opened for reading	/proc/594/maps
File opened for reading	/proc/610/maps
File opened for reading	/proc/193/cmdline	0ca261719f3c7f760df837f9a1160c50
File opened for reading	/proc/81/maps
File opened for reading	/proc/169/cmdline
File opened for reading	/proc/576/maps
File opened for reading	/proc/577/cmdline
File opened for reading	/proc/596/cmdline
File opened for reading	/proc/694/maps
File opened for reading	/proc/98/cmdline	0ca261719f3c7f760df837f9a1160c50
File opened for reading	/proc/623/cmdline
File opened for reading	/proc/642/maps
File opened for reading	/proc/673/maps
File opened for reading	/proc/167/maps
File opened for reading	/proc/352/cmdline
File opened for reading	/proc/600/cmdline
File opened for reading	/proc/680/cmdline
File opened for reading	/proc/22/cmdline	0ca261719f3c7f760df837f9a1160c50
File opened for reading	/proc/11/cmdline
File opened for reading	/proc/161/maps
File opened for reading	/proc/684/cmdline
File opened for reading	/proc/13/cmdline	0ca261719f3c7f760df837f9a1160c50
File opened for reading	/proc/11/maps
File opened for reading	/proc/17/maps
File opened for reading	/proc/658/cmdline

/tmp/0ca261719f3c7f760df837f9a1160c50
/tmp/0ca261719f3c7f760df837f9a1160c50
1⤵
- Reads runtime system information
PID:580

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads