Analysis
-
max time kernel
120s -
max time network
133s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240226-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240226-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
15-03-2024 00:57
Behavioral task
behavioral1
Sample
ca1432fadc3b4bef8d582d57ac0e6f5a
Resource
ubuntu1804-amd64-20240226-en
ubuntu-18.04-amd64
2 signatures
150 seconds
General
-
Target
ca1432fadc3b4bef8d582d57ac0e6f5a
-
Size
4.5MB
-
MD5
ca1432fadc3b4bef8d582d57ac0e6f5a
-
SHA1
e50399ad18b0654c725b3384269e838a65d984f5
-
SHA256
9f9bbbc80a2035df99abd60dc26e9b068b63e5fcc498e700b8cc6640ca39261b
-
SHA512
7ef64bf805f1ad503e92205384a29c97b0b151ebbe2e0fc8eb022ba55d4aded374c7fd448908a344892b51fa95c747bbdd54787b8966387f5c5690a64ef20ee0
-
SSDEEP
49152:6cP4AQRe6w1LEekNEIx7OCa9NeAdWTxedLjUCszWvKS71LTRAfT+GDWM2tJ11zqq:tD2NEPCkWTqLICGW5LNAqM/i
Score
3/10
Malware Config
Signatures
-
Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/kernel/mm/transparent_hugepage/hpage_pmd_size ca1432fadc3b4bef8d582d57ac0e6f5a -
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/ca1432fadc3b4bef8d582d57ac0e6f5a.pid ca1432fadc3b4bef8d582d57ac0e6f5a