Extracted

• • Target

    861f3e361bc8b1df141425899b2711c8

  • Size

    113KB

  • MD5

    861f3e361bc8b1df141425899b2711c8

  • SHA1

    9574d3680680b1a66dad9dab1962f8ee91586770

  • SHA256

    a0af286c47ec6c01aa3f8f5ab4e221d73e688e62b1db10604f66105926b08679

  • SHA512

    e477468584e2a23b57593331bf182c5d656411c71658136418452f316354ae86e0f051ca52c31bedafed8b11005f5410b69e567ed51becaca4ea87858ae2b036

  • SSDEEP

    3072:8HriptjWJdLKz26JyTr2ZbUpwJY7l5hKRGGwXXIDjqudQAllrESyM:4rEbhJKl5hKRGmjqudQAllrESyM

  Score

  7^/10

  • Changes its process name

  • Deletes itself

  • Reads system routing table

    Gets active network interfaces from /proc virtual filesystem.

  behavioral1