Analysis
-
max time kernel
145s -
max time network
157s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20231215-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20231215-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
19-12-2023 22:51
Behavioral task
behavioral1
Sample
2db2ef95c8337cc6f81fffe71132cc4b
Resource
ubuntu1804-amd64-20231215-en
ubuntu-18.04-amd64
2 signatures
150 seconds
General
-
Target
2db2ef95c8337cc6f81fffe71132cc4b
-
Size
70KB
-
MD5
2db2ef95c8337cc6f81fffe71132cc4b
-
SHA1
2c770a67f9d9d0cfb6441d0bbe2059a6665845a3
-
SHA256
9e9e6e6ee78abe50cf080ed311e579f5592f23f54d2c3e0bec7d46d0579728a1
-
SHA512
012f94d34266bfaede639858b4adbc2830b0abcf197632f25052385c8dec149c5829e20a7d6e4c272fb68c0f6a62e60a4e64a109b22781729e52f00495d7be63
-
SSDEEP
1536:8uY0qH/NQ27qLfEg8ZW087TrG4GmF+lVOCjUxfg71:q0qH/C2GLfcsbP6TmElVOCAxfg71
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
Processes:
2db2ef95c8337cc6f81fffe71132cc4bdescription ioc process File opened for reading /proc/net/route 2db2ef95c8337cc6f81fffe71132cc4b -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes:
2db2ef95c8337cc6f81fffe71132cc4bdescription ioc process File opened for reading /proc/net/route 2db2ef95c8337cc6f81fffe71132cc4b