Analysis
-
max time kernel
152s -
max time network
151s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20231215-en -
resource tags
-
submitted
30-12-2023 12:39
General
-
Target
18cc283e5d635d61f9b3e6acbf0ac6ef
-
Size
70KB
-
MD5
18cc283e5d635d61f9b3e6acbf0ac6ef
-
SHA1
624061957a6488923734830345e79e8e218e718b
-
SHA256
9658fa7102d8557a0cd4a09ca73b1b1541fa860a067b637a8fe999f6e944f698
-
SHA512
cceabb9568ab0d459c43ee5992587d947ebad75bbc1cafd36be894029076e7b1c76e74c9bd9154734ee9358f03b11b42b70f9108290005b0125c12fa07e2303e
-
SSDEEP
1536:LRnhm7tf2aUHnU6HMDvtk1MF8Laxn6qRH9cmGEqS:LRnhsflUHn1HKk1082xn6gUS
Score
7/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/18cc283e5d635d61f9b3e6acbf0ac6ef/tmp/18cc283e5d635d61f9b3e6acbf0ac6ef1⤵
- Changes its process name
- Reads system routing table
- Reads system network configuration