Extracted

• • Target

    5b7bb67e1af59bff89362e90ec7fc638

  • Size

    121KB

  • MD5

    5b7bb67e1af59bff89362e90ec7fc638

  • SHA1

    c639095662fb0bab27f6a68cf068497267da6951

  • SHA256

    543ed806eaad711fcd3e6ee53c535a5b1feb70cab544084660615c8858efd4aa

  • SHA512

    e5e3590b90d8524468fd6f40b621929a15b08269d407d5adc571bca7ce81a8c1f812985234a8f571fb238843b44de51b105662bc5c1debbb73ab2d88dd499d94

  • SSDEEP

    3072:NHrkUt7q0dEK52D0tuA4FcDBtIWkzk5h4CeuABQ82E5QInMqEi/M:Fr+cDHEzk5h4CeuL82E5QInMqEi/M

  Score

  7^/10

  • Changes its process name

  • Deletes itself

  • Reads system routing table

    Gets active network interfaces from /proc virtual filesystem.

  behavioral1