Analysis
-
max time kernel
135s -
max time network
153s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20231215-en -
resource tags
-
submitted
19-12-2023 22:59
General
-
Target
3a34ba13dab5468fa15b013ca5f0cdda
-
Size
129KB
-
MD5
3a34ba13dab5468fa15b013ca5f0cdda
-
SHA1
896ed2e78a11328e3af7c9247736c044acef25b5
-
SHA256
cccff138c2d14b54dc125214cdbdcd19854d18f660f637f4841ddc4b53a22ac8
-
SHA512
a06fefee0e3aa1a9a9bdf7fe40418ef3fc9c52d5b37f87b2b22e1b86dc5b205374e9c1a329ab450ca2bd5f0b44ffe02bc3bea9e09b776a4db6ac7e48b4dbf9a7
-
SSDEEP
3072:QPL1QFV1s2GF9cDawW70kFeG8Llqp+pmxATM7oPWL:NFV1ycDVW70kIlqp+pmxATM7oPWL
Score
7/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/3a34ba13dab5468fa15b013ca5f0cdda/tmp/3a34ba13dab5468fa15b013ca5f0cdda1⤵
- Changes its process name
- Reads system routing table
- Reads system network configuration