Analysis
-
max time kernel
144s -
max time network
157s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20231215-en -
resource tags
-
submitted
20-12-2023 16:44
General
-
Target
ec176ebc15db9364a00e2310100b21f1
-
Size
109KB
-
MD5
ec176ebc15db9364a00e2310100b21f1
-
SHA1
9a741046d785ac6197c30e383a4c2df284138d53
-
SHA256
97c41f5b99c3652aa62c89f76b074dceb3f363119673f9897d1ad5a87879e78d
-
SHA512
268909adc59274315be4f330ec3cdb0c9333879461161f69ab0d4f3afa95dabb728be04cc5d9e4e93e4cb94d906472f8c21fc51cf5f65bfc7c0d10b04589c10b
-
SSDEEP
3072:EbR/YAu5n5Xjv+IeldZPqdhQZ01lqVmZ901XGXg9Px:OJyn5TmnNPqdB1lymZ901XGXg9Px
Score
7/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/ec176ebc15db9364a00e2310100b21f1/tmp/ec176ebc15db9364a00e2310100b21f11⤵
- Changes its process name
- Reads system routing table
- Reads system network configuration