Analysis
-
max time kernel
149s -
max time network
148s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240226-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240226-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
08/03/2024, 15:49
Behavioral task
behavioral1
Sample
9cb6dc863e56316364c7c1e51f74ca991d734dacef9029337ddec5ca684c1106
Resource
ubuntu1804-amd64-20240226-en
General
-
Target
9cb6dc863e56316364c7c1e51f74ca991d734dacef9029337ddec5ca684c1106
-
Size
1.5MB
-
MD5
026f376489bcb2a3c0b3a64235885652
-
SHA1
70a309c7fce5f3db4c6e5bf06a746afa41eb931b
-
SHA256
9cb6dc863e56316364c7c1e51f74ca991d734dacef9029337ddec5ca684c1106
-
SHA512
9467f269e411301fd8498e622d70ab348edb53b85c2d56a75e7c4ff8e7c1aa610e6fb17cc2ff816535f4c7a0225532a4193400d2bbbb098db6f5cc06064543cd
-
SSDEEP
24576:2UUh3to6d0wmD/pPPMYrpaft90XrHhnzmEDSUfEcnZnNSjZA0vgVXF4tYcARlQpl:2nh3to5xDp3VrpaT0Hg46cnZNSjZdcFU
Malware Config
Signatures
-
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
description ioc Process File opened for reading /proc/self/exe 9cb6dc863e56316364c7c1e51f74ca991d734dacef9029337ddec5ca684c1106 -
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc File opened for modification /tmp/debconf.socket
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384B
MD582b4eb97305031d82f80490a18d72a9e
SHA19b506465912dacd8fa101564024b7bb03731f4ac
SHA2568ef0022416e24d0a9f0a22bae41b783c5a4c0728e73f7921e866a9d7ccb6536d
SHA5121246c9af5650c0ce26251951137551e2f905b70a31ee4dfc6e1b066b88b4e80a00e26bbb62297ac199d86ad1779b01eef8380f91acccefc8704bae65ac1382f3