Analysis
-
max time kernel
7s -
max time network
134s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20231215-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20231215-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
12-02-2024 03:43
Static task
static1
Behavioral task
behavioral1
Sample
384ec732200ab95c94c202f42b51e870f51735768888aaabc4e370de74e825e3.elf
Resource
ubuntu1804-amd64-20231215-en
General
-
Target
384ec732200ab95c94c202f42b51e870f51735768888aaabc4e370de74e825e3.elf
-
Size
19.9MB
-
MD5
50aef88ec0d6b973c6ed24936dcaed62
-
SHA1
d043e592251ddea5927d350c37abbca898db9ce9
-
SHA256
384ec732200ab95c94c202f42b51e870f51735768888aaabc4e370de74e825e3
-
SHA512
e9a800f088d68e5e57844686c390517d1348f674a1086613dbbaba8dd2564277483497bab8b3fc95a18a3bbe56726702c61de7af99561f5c692dd0b6c69363ed
-
SSDEEP
196608:nL9FX745dAgW35zes3IaxOP3QEHdoshi/g1X0gp:L9O5IqVHdoshc
Malware Config
Signatures
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/psched 384ec732200ab95c94c202f42b51e870f51735768888aaabc4e370de74e825e3.elf -
Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/kernel/mm/transparent_hugepage/hpage_pmd_size 384ec732200ab95c94c202f42b51e870f51735768888aaabc4e370de74e825e3.elf