96e906128095dead57fdc9ce8688bb889166b67c9a1b8fdb93d7cff7f3836bb9

Analysis

max time kernel
0s
max time network
128s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240226-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240226-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
10-04-2024 12:51

Target

96e906128095dead57fdc9ce8688bb889166b67c9a1b8fdb93d7cff7f3836bb9
Size

30KB
MD5

11daa1c8a3846d9ef3d030efb51c2e14
SHA1

ca73295816ca7b693471803274115457a156ecb2
SHA256

96e906128095dead57fdc9ce8688bb889166b67c9a1b8fdb93d7cff7f3836bb9
SHA512

854936156a104f2dfc80e3a54ab38303b53ef2cf7b130fbab6033b8dd5f64f5d7b6a5b68c438a388edc562b968f34097844b4e0fc00dde2a8f10defc0044b345
SSDEEP

384:RM1H7nV74u6PJOK8Ik16MvnCUaHx0kGOXptMyV4M1EPt0iFBv5Vhvb2FSj7:RM9btio1r4/JXMyU0iFt5uy7

Score

7^/10

Changes its process name 1 IoCs

Processes:

96e906128095dead57fdc9ce8688bb889166b67c9a1b8fdb93d7cff7f3836bb9

description	ioc	pid	process
Changes the process name, possibly in an attempt to hide itself	/usr/lib/systemd/systemd-machined	1547	96e906128095dead57fdc9ce8688bb889166b67c9a1b8fdb93d7cff7f3836bb9

Creates Raw socket 1 IoCs
Creates a socket that captures raw packets at the device level

Processes:

pid

1548

pid
1548

/tmp/96e906128095dead57fdc9ce8688bb889166b67c9a1b8fdb93d7cff7f3836bb9
/tmp/96e906128095dead57fdc9ce8688bb889166b67c9a1b8fdb93d7cff7f3836bb9
1⤵
- Changes its process name
PID:1547