Analysis
-
max time kernel
122s -
max time network
129s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20231222-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20231222-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
25-01-2024 06:18
Behavioral task
behavioral1
Sample
73f329ccdc6abeaada5c187f72fc3dc9
Resource
ubuntu1804-amd64-20231222-en
ubuntu-18.04-amd64
2 signatures
150 seconds
General
-
Target
73f329ccdc6abeaada5c187f72fc3dc9
-
Size
4.5MB
-
MD5
73f329ccdc6abeaada5c187f72fc3dc9
-
SHA1
4f2b535040f466777d333cee8ae4580f3e5d7bda
-
SHA256
039a997681655004aed1cc4c6ee24bf112d79e4f3b823ccae96b4a32c5ed1b4c
-
SHA512
333970beb1f2705cf54f144e696eb9a0a5d10049d2ec4a50dcbf8c98cb0f5bcf467660f6b3b8bb2c808ef63b7130b8c81155d237d92032634fc69a0b7d013973
-
SSDEEP
49152:/6PwBeRwpNnBt2RNEJBfTvB1NiAYfK0gMz6UTX6fDxdeLrP0oveYBOZhRdXcquAC:1TGNE3vQfK0ztTqfSLrPuN/i
Score
3/10
Malware Config
Signatures
-
Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
Processes:
73f329ccdc6abeaada5c187f72fc3dc9description ioc process File opened for reading /sys/kernel/mm/transparent_hugepage/hpage_pmd_size 73f329ccdc6abeaada5c187f72fc3dc9 -
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes:
73f329ccdc6abeaada5c187f72fc3dc9description ioc process File opened for modification /tmp/73f329ccdc6abeaada5c187f72fc3dc9.pid 73f329ccdc6abeaada5c187f72fc3dc9