Analysis
-
max time kernel
140s -
max time network
142s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20230621-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20230621-enkernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
24/07/2023, 02:41
Behavioral task
behavioral1
Sample
40cea0fd6a719373eeeaecb444ff7b7c93f096d868e22d867a34e4824e9dcb16.elf
Resource
ubuntu1804-amd64-20230621-en
2 signatures
150 seconds
General
-
Target
40cea0fd6a719373eeeaecb444ff7b7c93f096d868e22d867a34e4824e9dcb16.elf
-
Size
91KB
-
MD5
c3425a2839883dbec80af2c4dde02e98
-
SHA1
f8300adce76adcd7c011c9ac7f191538cc0a64b4
-
SHA256
40cea0fd6a719373eeeaecb444ff7b7c93f096d868e22d867a34e4824e9dcb16
-
SHA512
07bc18240c7c394dcba1bc71b581632431953ae59e6ee2c69b98ca2105fa1a14bd4e1d3ed15112219d72972df9a8c02c04c03ecd5074ad615a13b88b93df1a51
-
SSDEEP
1536:p7rHXokXsWFVSzkfLEkZAT5ipG5v3tphauH/njvyig6I9um2Xj5YZb0e:pcCPOkfQfNipGdtphaE/njvLg99um2Xe
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route 40cea0fd6a719373eeeaecb444ff7b7c93f096d868e22d867a34e4824e9dcb16.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route 40cea0fd6a719373eeeaecb444ff7b7c93f096d868e22d867a34e4824e9dcb16.elf