Analysis
-
max time kernel
142s -
max time network
147s -
platform
ubuntu-20.04_amd64 -
resource
ubuntu2004-amd64-20240221-en -
resource tags
arch:amd64arch:i386image:ubuntu2004-amd64-20240221-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system -
submitted
23-04-2024 08:24
Static task
static1
Behavioral task
behavioral1
Sample
e40599089762af870059a316abda88b6.elf
Resource
ubuntu2004-amd64-20240221-en
ubuntu-20.04-amd64
3 signatures
150 seconds
General
-
Target
e40599089762af870059a316abda88b6.elf
-
Size
59KB
-
MD5
e40599089762af870059a316abda88b6
-
SHA1
61fca442efc82614c7da72b52abcd6557c1d0286
-
SHA256
b7c08b6253f0ac2d89f0b003b0166739f28731c82e1dc8895899dcc928ce9544
-
SHA512
d8d82e3f35073567839aaf0c4ac2a7ee32cd7701fc7afc95b86ad5675eed30225bc3c7d4a895fb79b0de5657d043dcc73d9fa84277823aac664e27011e6cb12b
-
SSDEEP
1536:EPy5y20RQFoHW/RV3ClWGbV0rAeLPTA5XGU1aZJFuJA:EPx2gQFo2ZV31M0r/7TuXGU1EuJA
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route e40599089762af870059a316abda88b6.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route e40599089762af870059a316abda88b6.elf -
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
description ioc Process File opened for reading /proc/self/exe e40599089762af870059a316abda88b6.elf