Analysis
-
max time kernel
146s -
max time network
157s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20231215-en -
resource tags
-
submitted
19-12-2023 22:24
General
-
Target
05d61c9bbe5b4583df5b6667cfe592d3
-
Size
139KB
-
MD5
05d61c9bbe5b4583df5b6667cfe592d3
-
SHA1
5b1efa9bc07977a2a389f17ee8eebf62c3daafff
-
SHA256
74d7703f63149de82ff6f6f584f23ffe694242014a12c922f959097bf8da70cc
-
SHA512
aec0727152e9195c2abe0b5ddd096136f90ba294ac23db7445300c212263bea232477e954256f7cb5f3737edbb752ab1cb5f53c7fc75d4e3aa06a3575d3a3a26
-
SSDEEP
3072:/wQUAsPbw0U2dCsJfx/x9/IZ8erIfJCBGEDHziH90PcZsatph1:3st7RRjIZ8eaCwE/iH90PcZsatph1
Score
7/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/05d61c9bbe5b4583df5b6667cfe592d3/tmp/05d61c9bbe5b4583df5b6667cfe592d31⤵
- Changes its process name
- Reads system routing table
- Reads system network configuration