Analysis
-
max time kernel
143s -
max time network
151s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20231222-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20231222-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
22/12/2023, 17:21
Static task
static1
Behavioral task
behavioral1
Sample
ffae008e963960fa61a52b739af34f1d
Resource
ubuntu1804-amd64-20231222-en
3 signatures
150 seconds
General
-
Target
ffae008e963960fa61a52b739af34f1d
-
Size
152KB
-
MD5
ffae008e963960fa61a52b739af34f1d
-
SHA1
9407395a8a306e5f57d79b5b6f1f1e99dc0a4d08
-
SHA256
24662656df05da1a4212db19e7cbfe5f91cf2cad1964fe67500882681016c903
-
SHA512
c5850a4e07d92021e3c7eca9966d1a9d74eb0d267359bed0f530a8e2816ae2a804416d2be78ca9ccbcfb045dab7231bd91a664378ccfb66889ee29e9585cfab9
-
SSDEEP
3072:MFFo83htpplvgYodBZgRAjDEar5KoCNX/tkmpcL4D/JY4lETWHBTH:NQnuf+zarkoKvtkmpcL4D/JY4lETWHBj
Score
7/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
description pid Process Changes the process name, possibly in an attempt to hide itself 1588 ffae008e963960fa61a52b739af34f1d -
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route ffae008e963960fa61a52b739af34f1d -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route ffae008e963960fa61a52b739af34f1d