Analysis

  • max time kernel
    1s
  • max time network
    133s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20240226-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20240226-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    10-04-2024 11:13

General

  • Target

    var/tmp/proc/mysql

  • Size

    4.1MB

  • MD5

    122af35de19ec7b2cb6a71a0705ec466

  • SHA1

    f0cbfa8eb15076653ea358aea778f87be78a804c

  • SHA256

    722d719410903062e8d2cbd55b842e3e120d2c284ada235090eaac73bc64996e

  • SHA512

    b4c1f8b91cd2616985359fd891ba2a1f69818011e1ad4fbf34c9320d1c10fc9c9d085ee0f5b081c633d6c215d6631c79e09016731231fbd39ad92d0eb6587cb4

  • SSDEEP

    98304:rM+VkagzizOqfHku5VM69Z7vjSeULhM2AIWEkbQI3XQa/7y:rMnzizJfHkwe699+eULhM2dkQGF/7y

Score
3/10

Malware Config

Signatures

  • Reads runtime system information 3 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/var/tmp/proc/mysql
    /tmp/var/tmp/proc/mysql
    1⤵
    • Reads runtime system information
    PID:1565
    • /usr/bin/getconf
      /usr/bin/getconf CLK_TCK
      2⤵
        PID:1568

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1565-1-0x0000000000400000-0x0000000000e6e0d8-memory.dmp