Extracted

• • Target

    73e3eb7892af00494c9aaf84920ad22c

  • Size

    107KB

  • MD5

    73e3eb7892af00494c9aaf84920ad22c

  • SHA1

    9516173d5ad4effa188fb72f7608e7e0c2c54154

  • SHA256

    5f843cf8a7f9ce2700950256201f515d7e0de2e2d59299cd56aa4e133e9deec7

  • SHA512

    fb42dafec93b4478914ea809aa9a4fb73c373645d1a573b30f07d85c6f96df4ae20ea84fb5de1246fd457f0de0f94d9cacabe49c40c81713d385487bf3e06010

  • SSDEEP

    3072:Dx1H8lpb2eBln0JKerJhVPglhUMDznoy6G8wgOU:0BBlIKe9UlhUMDznoy6G8wgOU

  Score

  7^/10

  • Changes its process name

  • Deletes itself

  • Reads system routing table

    Gets active network interfaces from /proc virtual filesystem.

  behavioral1