Analysis
-
max time kernel
140s -
max time network
150s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240226-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240226-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
11-04-2024 01:41
Behavioral task
behavioral1
Sample
d03bd110c8f6209ed3ce5715f67b8ae7775276ea32a62f936b27a2f2740350ed.elf
Resource
ubuntu1804-amd64-20240226-en
ubuntu-18.04-amd64
2 signatures
150 seconds
General
-
Target
d03bd110c8f6209ed3ce5715f67b8ae7775276ea32a62f936b27a2f2740350ed.elf
-
Size
83KB
-
MD5
ec31d7526409159dfef577c3551b4dab
-
SHA1
a4c9212df32e439cc42d22551901ce6cae806fbb
-
SHA256
d03bd110c8f6209ed3ce5715f67b8ae7775276ea32a62f936b27a2f2740350ed
-
SHA512
de285857720ca47100b7cccc006c9bfd156427c715600a6126fb05002f98f8973da904bab6ee4baf9f043aa7074d0825c8ec6a049799a858d0b528fab97191aa
-
SSDEEP
1536:h74oufAAfSbKhakxnkc6yw83lJ1F2y2lDRMfdmw+ZWOT42oF54S:xCAAfSEtkc6yBlJayQodmvZWOT9oF54S
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route d03bd110c8f6209ed3ce5715f67b8ae7775276ea32a62f936b27a2f2740350ed.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route d03bd110c8f6209ed3ce5715f67b8ae7775276ea32a62f936b27a2f2740350ed.elf