Extracted

• • Target

    23a3de5e8323ec2ba8487e9902eb8fa9

  • Size

    175KB

  • MD5

    23a3de5e8323ec2ba8487e9902eb8fa9

  • SHA1

    eb381b4380f009999091cd0591614c20d8ac9e2b

  • SHA256

    cfcb4c51771b7f4c3ecb28020c34a196fbda7efc67d67531a7a4644927d53096

  • SHA512

    d73f47922c234fc4992e013359a54e4af9ecf6534533dbfa432ceb415dc1a3542f173fc25a31134ed2f4bea6226db5aea0babf520f6917234ab35e16bbdccce4

  • SSDEEP

    3072:QuJ2XrhIrTJhm17SOg44aNtKmn48oaPd8uw7qTO5hgW2SNpM/99NWwXmowhbRWzZ:QXSc4aNtKm48ovP715hgW2SPM/9XJXmY

  Score

  7^/10

  • Changes its process name

  • Deletes itself

  • Reads system routing table

    Gets active network interfaces from /proc virtual filesystem.

  behavioral1