Analysis
-
max time kernel
0s -
max time network
128s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240226-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240226-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
04-04-2024 16:58
Static task
static1
Behavioral task
behavioral1
Sample
.3rfhx90ow39j92066681068~
Resource
ubuntu2004-amd64-20240221-en
Behavioral task
behavioral2
Sample
main.sh
Resource
ubuntu1804-amd64-20240226-en
Behavioral task
behavioral3
Sample
main.sh
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral4
Sample
main.sh
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral5
Sample
main.sh
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral6
Sample
wgcf
Resource
ubuntu1804-amd64-20240226-en
General
-
Target
wgcf
-
Size
8.6MB
-
MD5
1eac8559ce49a32d1bdb5c18348cc875
-
SHA1
ec8a0975a01ae22b217f2c7046637b7460a37f7f
-
SHA256
01b41112db008cace56500a6976a8916036176d514765a5875c3467007ad8b88
-
SHA512
2afa0f3119687e5c47556c59ddbfcc34af1004464ca1f5d4de50eb791b6636ba259c67422876213edbc43b27422be7d19342af1e928d750ba08a1423d12de718
-
SSDEEP
49152:OS6NPV4ErDiREJrb/TuvO90d7HjmAFd4A64nsfJZFp9hYYxYGUI0f/m+EKeKIL2x:OPjYYxwXNGTuuDoNowrAoPkErGb5
Malware Config
Signatures
-
Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/kernel/mm/transparent_hugepage/hpage_pmd_size wgcf