Analysis
-
max time kernel
29s -
max time network
30s -
platform
ubuntu-20.04_amd64 -
resource
ubuntu2004-amd64-20240221-en -
resource tags
-
submitted
10/04/2024, 16:33
General
-
Target
x86_64
-
Size
164KB
-
MD5
cdb979c99da4a39fa219334776cee967
-
SHA1
e052223a9d94ca44654b7c1ab7fe14ddaff2c648
-
SHA256
2930ec28ebf423fdc95fa45bf07b9d4ab2bbec06e05d8b3abefff4384d29db5f
-
SHA512
053b76060e7f1bdf9f66740950c6714722a5e41677f84dc799767c6925ad8087d127f7d297a028a07876d1db77f74a88104ac46d890963e64ac3cbd624424d5e
-
SSDEEP
3072:OBDT38j0fbTDyYRurdlIlMR3K8MuUgpqdW7wkKaHKvLInnnnnnnnnnnnnnn7nenO:OFTNfHRa5E6MLInnnnnnnnnnnnnnn7n3
Score
9/10
Malware Config
Signatures
-
Contacts a large (7690) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Changes its process name 1 IoCs
-
Deletes itself 1 IoCs
-
Traces itself 1 IoCs
Traces itself to prevent debugging attempts
-
Unexpected DNS network traffic destination 1 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
Processes
-
/tmp/x86_64/tmp/x86_641⤵
- Changes its process name
- Deletes itself
- Traces itself