Analysis
-
max time kernel
3s -
max time network
131s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20231215-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20231215-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
12-02-2024 03:36
Static task
static1
Behavioral task
behavioral1
Sample
74fe73c56ed7300b8ac739001ae122e0dcd8417f6917a9c2716cb60018754f2c.elf
Resource
ubuntu1804-amd64-20231215-en
General
-
Target
74fe73c56ed7300b8ac739001ae122e0dcd8417f6917a9c2716cb60018754f2c.elf
-
Size
11.7MB
-
MD5
89ee9a224039b2ce1eec74bd0a1c13e3
-
SHA1
84b1eb1fab3629b9fccc3b3e510fd4473d937c8f
-
SHA256
74fe73c56ed7300b8ac739001ae122e0dcd8417f6917a9c2716cb60018754f2c
-
SHA512
9142af7b4f48a62b44c0e95767c21a7c61b448b96b6d6af2d184cea0c933074e68e5d3adbc09b1aae877ad74caabde4e3549284e317285450dfe5c539d33c081
-
SSDEEP
98304:GOepG/eidV0tcjB+GTK3udNb7g5kEn3mfQA0v1Bts2OOzsRczy4:GOwGGwV0tcjB+GTKYb7g5kEnWoVLzP
Malware Config
Signatures
-
Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/kernel/mm/transparent_hugepage/hpage_pmd_size 74fe73c56ed7300b8ac739001ae122e0dcd8417f6917a9c2716cb60018754f2c.elf -
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
description ioc Process File opened for reading /proc/stat 74fe73c56ed7300b8ac739001ae122e0dcd8417f6917a9c2716cb60018754f2c.elf