Analysis
-
max time kernel
143s -
max time network
151s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20231222-en -
resource tags
-
submitted
22/12/2023, 17:21
General
-
Target
ffae008e963960fa61a52b739af34f1d
-
Size
152KB
-
MD5
ffae008e963960fa61a52b739af34f1d
-
SHA1
9407395a8a306e5f57d79b5b6f1f1e99dc0a4d08
-
SHA256
24662656df05da1a4212db19e7cbfe5f91cf2cad1964fe67500882681016c903
-
SHA512
c5850a4e07d92021e3c7eca9966d1a9d74eb0d267359bed0f530a8e2816ae2a804416d2be78ca9ccbcfb045dab7231bd91a664378ccfb66889ee29e9585cfab9
-
SSDEEP
3072:MFFo83htpplvgYodBZgRAjDEar5KoCNX/tkmpcL4D/JY4lETWHBTH:NQnuf+zarkoKvtkmpcL4D/JY4lETWHBj
Score
7/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/ffae008e963960fa61a52b739af34f1d/tmp/ffae008e963960fa61a52b739af34f1d1⤵
- Changes its process name
- Reads system routing table
- Reads system network configuration