Analysis
-
max time kernel
4s -
max time network
102s -
platform
linux_amd64 -
resource
ubuntu1804-amd64-en-20211208 -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
18-09-2023 01:33
Static task
static1
Behavioral task
behavioral1
Sample
darwin
Resource
macos-20230831-en
Behavioral task
behavioral2
Sample
linux
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral3
Sample
windows.exe
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
windows.exe
Resource
win10v2004-20230915-en
General
-
Target
linux
-
Size
4.1MB
-
MD5
b70ef7b31c503ebbfbbacb00474a59ed
-
SHA1
ca68eb1538023d9a3838ec6171e0dc590fdad7e9
-
SHA256
b546a368a8ea6c6e1cf537ab3591a97d0b96bc57b62d1ea80a7e39a4871950be
-
SHA512
1135277e87791a623a2cd1737f646992f9ac9c463e8e197a785ba031d89813af818e03ac0a462d4aceff33a55802c317f7448a316099f1ca8c06356ee5918da3
-
SSDEEP
49152:JygDzhjXL3II002IzzCekvGsZv1xVL4C2xiJbWkpjbXWdtq/8EzM0VF1:JVVnYO7zClp3xaitfW
Malware Config
Signatures
-
Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/kernel/mm/transparent_hugepage/hpage_pmd_size linux