Analysis
-
max time kernel
155s -
max time network
159s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20231215-en -
resource tags
-
submitted
19-12-2023 23:23
General
-
Target
6073c1b93213304ebcabc9668a377e1a
-
Size
109KB
-
MD5
6073c1b93213304ebcabc9668a377e1a
-
SHA1
8c6702e60eb18e957fe032d109f7de479e380756
-
SHA256
c8e6f4547a631990b69aec9270e4a8952549ff5478477af812359845b59be159
-
SHA512
a0e75f04a04d00466ce7395953f02a5eb269a21dd82f333b04de7bccde5b1b3fa95080366e68bc0dbdea73b71bafcd8e974da7505df31ed5bd899a39f1c1efdc
-
SSDEEP
3072:qEcXP1dEWJAIvvcZ4pN2mdhQZEpmZ901XGXg9Px:K/1SWJFXQq2mdppmZ901XGXg9Px
Score
7/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/6073c1b93213304ebcabc9668a377e1a/tmp/6073c1b93213304ebcabc9668a377e1a1⤵
- Changes its process name
- Reads system routing table
- Reads system network configuration