Analysis
-
max time kernel
153s -
max time network
103s -
platform
linux_amd64 -
resource
ubuntu1804-amd64-en-20211208 -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
04-06-2023 13:23
Behavioral task
behavioral1
Sample
0ca261719f3c7f760df837f9a1160c50
Resource
ubuntu1804-amd64-en-20211208
ubuntu-18.04-amd64
2 signatures
150 seconds
General
-
Target
0ca261719f3c7f760df837f9a1160c50
-
Size
257KB
-
MD5
0ca261719f3c7f760df837f9a1160c50
-
SHA1
876f0fc4300b0a16bb40d72fdb0ecf5e09e82f08
-
SHA256
1625e84ac5368c1d97aa170cff5d262f8f8fabcdfaf3646777f985aa0da3b75b
-
SHA512
26ab055164118c3e393b63b25692d6ae926bf3eab298ccc78c948dba8617744d3278bf8366284106e5e267f65d7b7c600cf19fbaf3b0eb2f2bd0827615c45eff
-
SSDEEP
6144:fKv0+AdVI6Ho5f/wbOFPa7WK4mMhZKcqk15eQ10IZz1OcI:yv0+AdyWOBfK4mMhZKjk15eQ10IZzMcI
Score
6/10
Malware Config
Signatures
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads runtime system information 64 IoCs
Reads data from /proc virtual filesystem.
description ioc Process File opened for reading /proc/26/cmdline 0ca261719f3c7f760df837f9a1160c50 File opened for reading /proc/10/maps Process not Found File opened for reading /proc/170/cmdline 0ca261719f3c7f760df837f9a1160c50 File opened for reading /proc/251/cmdline 0ca261719f3c7f760df837f9a1160c50 File opened for reading /proc/23/cmdline Process not Found File opened for reading /proc/29/maps Process not Found File opened for reading /proc/31/maps Process not Found File opened for reading /proc/30/cmdline 0ca261719f3c7f760df837f9a1160c50 File opened for reading /proc/4/maps Process not Found File opened for reading /proc/16/maps Process not Found File opened for reading /proc/26/maps Process not Found File opened for reading /proc/623/maps Process not Found File opened for reading /proc/666/maps Process not Found File opened for reading /proc/686/cmdline Process not Found File opened for reading /proc/223/cmdline 0ca261719f3c7f760df837f9a1160c50 File opened for reading /proc/85/maps Process not Found File opened for reading /proc/155/cmdline Process not Found File opened for reading /proc/163/cmdline Process not Found File opened for reading /proc/251/cmdline Process not Found File opened for reading /proc/581/maps Process not Found File opened for reading /proc/2/cmdline Process not Found File opened for reading /proc/418/cmdline Process not Found File opened for reading /proc/458/cmdline Process not Found File opened for reading /proc/589/cmdline Process not Found File opened for reading /proc/624/maps Process not Found File opened for reading /proc/27/maps Process not Found File opened for reading /proc/341/cmdline Process not Found File opened for reading /proc/613/cmdline Process not Found File opened for reading /proc/636/cmdline Process not Found File opened for reading /proc/3/cmdline Process not Found File opened for reading /proc/21/maps Process not Found File opened for reading /proc/98/maps Process not Found File opened for reading /proc/155/maps Process not Found File opened for reading /proc/115/cmdline 0ca261719f3c7f760df837f9a1160c50 File opened for reading /proc/84/cmdline Process not Found File opened for reading /proc/154/cmdline Process not Found File opened for reading /proc/447/maps Process not Found File opened for reading /proc/115/maps Process not Found File opened for reading /proc/192/cmdline Process not Found File opened for reading /proc/594/maps Process not Found File opened for reading /proc/610/maps Process not Found File opened for reading /proc/193/cmdline 0ca261719f3c7f760df837f9a1160c50 File opened for reading /proc/81/maps Process not Found File opened for reading /proc/169/cmdline Process not Found File opened for reading /proc/576/maps Process not Found File opened for reading /proc/577/cmdline Process not Found File opened for reading /proc/596/cmdline Process not Found File opened for reading /proc/694/maps Process not Found File opened for reading /proc/98/cmdline 0ca261719f3c7f760df837f9a1160c50 File opened for reading /proc/623/cmdline Process not Found File opened for reading /proc/642/maps Process not Found File opened for reading /proc/673/maps Process not Found File opened for reading /proc/167/maps Process not Found File opened for reading /proc/352/cmdline Process not Found File opened for reading /proc/600/cmdline Process not Found File opened for reading /proc/680/cmdline Process not Found File opened for reading /proc/22/cmdline 0ca261719f3c7f760df837f9a1160c50 File opened for reading /proc/11/cmdline Process not Found File opened for reading /proc/161/maps Process not Found File opened for reading /proc/684/cmdline Process not Found File opened for reading /proc/13/cmdline 0ca261719f3c7f760df837f9a1160c50 File opened for reading /proc/11/maps Process not Found File opened for reading /proc/17/maps Process not Found File opened for reading /proc/658/cmdline Process not Found