Analysis
-
max time kernel
48s -
max time network
145s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20230621-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20230621-enkernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
28-07-2023 15:29
Behavioral task
behavioral1
Sample
revers_met
Resource
ubuntu1804-amd64-20230621-en
ubuntu-18.04-amd64
1 signatures
150 seconds
General
-
Target
revers_met
-
Size
250B
-
MD5
cc0cad9f4578cd48adb3f7cd925f1d4d
-
SHA1
ba18c820e3e22c1c0fe0cd652292342dcb7c5638
-
SHA256
b7d17097a334a02f1336771bfb93b1c2f455ef20147aada4683673dce981e1fd
-
SHA512
87f62c659e7e4b362713c6ad30d267941889c37d638c09824fbe523756ee67eb6872edbb806422ba349774192cc93423a1b4beb4ea319f6a77b3701cb2b83f5d
Score
7/10
Malware Config
Signatures
-
Unexpected DNS network traffic destination 10 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Processes:
description ioc Destination IP 51.15.18.85 Destination IP 51.15.18.85 Destination IP 51.15.18.85 Destination IP 51.15.18.85 Destination IP 51.15.18.85 Destination IP 51.15.18.85 Destination IP 51.15.18.85 Destination IP 51.15.18.85 Destination IP 51.15.18.85 Destination IP 51.15.18.85