Extracted

• • Target

    a41a730f6422dc9a2935f875d2a2f961

  • Size

    116KB

  • MD5

    a41a730f6422dc9a2935f875d2a2f961

  • SHA1

    53a6e180e7cbfc720116b186e799f6ca0b3ad313

  • SHA256

    c7371127f8731bdb83cf3a9e904cf42f06b5440ebd036943b4ce0da0307d725f

  • SHA512

    a177b4ae31713b393cea93238cc75cf7c7c0991665f6ccb807f86365ec661ac78c8ae606553327b8e3c534e5cf4af17b3b73781cd8e512eff170a515ab0ae11b

  • SSDEEP

    3072:DDPx3z4BolIIOdDm2etJ8au49QuTsy2og5+r7gxAtc4kG7gyqc:Dt1ITdDdetJ8au4lFtgxAtc4n7gyqc

  Score

  7^/10

  • Changes its process name

  • Reads system routing table

    Gets active network interfaces from /proc virtual filesystem.

  behavioral1