Analysis
-
max time kernel
0s -
max time network
133s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240226-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240226-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
22/04/2024, 01:05
Static task
static1
Behavioral task
behavioral1
Sample
103c3465516b5b5edd7a493b0cb4eab1a31ca282d693f59e7d6f8fd97e3c436a.elf
Resource
ubuntu1804-amd64-20240226-en
2 signatures
150 seconds
General
-
Target
103c3465516b5b5edd7a493b0cb4eab1a31ca282d693f59e7d6f8fd97e3c436a.elf
-
Size
11.7MB
-
MD5
fbb99f3e2f5bfa6962457e8d6262b172
-
SHA1
39d7334f8eccbc9b0585680a3e2acf5269c3d259
-
SHA256
103c3465516b5b5edd7a493b0cb4eab1a31ca282d693f59e7d6f8fd97e3c436a
-
SHA512
c3cfcb7abbd711d01c5ae20ad7ae55f15cd1dead3e88e425144a9ac67338a0924db9834eb0f3c589b091581b8cbc9a701741de561d98cbee4ebc7b1867d54127
-
SSDEEP
196608:g32O9wW2CzJN2EPVyTyMwfSg/chcei3BupVL:lO9h2CVN2EjsgUcu/L
Score
3/10
Malware Config
Signatures
-
Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/kernel/mm/transparent_hugepage/hpage_pmd_size 103c3465516b5b5edd7a493b0cb4eab1a31ca282d693f59e7d6f8fd97e3c436a.elf -
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
description ioc Process File opened for reading /proc/stat 103c3465516b5b5edd7a493b0cb4eab1a31ca282d693f59e7d6f8fd97e3c436a.elf