Analysis
-
max time kernel
124s -
max time network
131s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20231215-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20231215-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
13-02-2024 04:59
Behavioral task
behavioral1
Sample
bc5b6355bf03a8c631bf242d3c79362d0fd1aa493a52835619ece12e4fb7aa13.elf
Resource
ubuntu1804-amd64-20231215-en
ubuntu-18.04-amd64
2 signatures
150 seconds
General
-
Target
bc5b6355bf03a8c631bf242d3c79362d0fd1aa493a52835619ece12e4fb7aa13.elf
-
Size
140KB
-
MD5
354c5878e1356bfd03bce4df0c2d824e
-
SHA1
d54e2235776969f68f43c7428a78f503bd58e8a1
-
SHA256
bc5b6355bf03a8c631bf242d3c79362d0fd1aa493a52835619ece12e4fb7aa13
-
SHA512
9e9a19adbf020001389db5675f99a17c32b0639bbdf258b10d2d3c8d6c80028a5d800361e6573bdb87b99be0ad24e93b126fa37989960b1d63f42934c902f695
-
SSDEEP
3072:syUyaJ3LUQEWuZI3zKZPhJpphahZtwktUm+QVOXFNqOPPe:+3OI3mzphaDtwxm+QVOXFNqOPPe
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route bc5b6355bf03a8c631bf242d3c79362d0fd1aa493a52835619ece12e4fb7aa13.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route bc5b6355bf03a8c631bf242d3c79362d0fd1aa493a52835619ece12e4fb7aa13.elf