Analysis
-
max time kernel
4s -
max time network
130s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20231023-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20231023-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
24-10-2023 07:32
Static task
static1
Behavioral task
behavioral1
Sample
npc
Resource
ubuntu1804-amd64-20231023-en
ubuntu-18.04-amd64
2 signatures
150 seconds
General
-
Target
npc
-
Size
11.5MB
-
MD5
64cc88ff3f8735ee8b0a6687c84dee1d
-
SHA1
2a097acbf4bf132f0bb6de7ea33f42b3292f5001
-
SHA256
4714e8ad9c625070ca0a151ffc98d87d8e5da7c8ef42037ca5f43baede6cfac1
-
SHA512
179e1ce166dd76ccbf155cb96293401e05763b2ea5c133497fd76aceac9df6a991063b63eeeedf426ad12e566677ee5340ac433fdd3469fdce0110c24cd00548
-
SSDEEP
196608:1WTV+5v5ScZK3O48F9zV3pnFeXRBzV3ka0JuP:10V+53XF9zcH1ka0
Score
3/10
Malware Config
Signatures
-
Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
Processes:
npcdescription ioc process File opened for reading /sys/kernel/mm/transparent_hugepage/hpage_pmd_size npc -
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
Processes:
npcdescription ioc process File opened for reading /proc/stat npc