Resubmissions
24/04/2024, 15:07
240424-shsqpscb41 324/04/2024, 06:28
240424-g8q41sfe53 924/04/2024, 06:15
240424-gzyshafd81 3Analysis
-
max time kernel
0s -
max time network
859s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240226-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240226-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
24/04/2024, 15:07
Static task
static1
Behavioral task
behavioral1
Sample
linx
Resource
ubuntu1804-amd64-20240226-en
2 signatures
150 seconds
General
-
Target
linx
-
Size
5.4MB
-
MD5
3f0585d37aae40644c0ed4b061329823
-
SHA1
655beae049ed69f64cb2cdfa396d8aaccae4501c
-
SHA256
fd3e21b8e2d8acf196cb63a23fc336d7078e72c2c3e168ee7851ea2bef713588
-
SHA512
59c1009adf953eae25e907a4bad11dcc7c5b31d9afecbed5a23a590366e337a7c4f534a27a1272f5a703df5d63b7af64f80f9b5b13d114ff954dceed0fa041c4
-
SSDEEP
98304:xHy12Jtiv2HgjqQJ7UtQQGesk4+u+sRL:6vmQJ7SbsfBp
Score
3/10
Malware Config
Signatures
-
Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/kernel/mm/transparent_hugepage/enabled linx -
Reads runtime system information 3 IoCs
Reads data from /proc virtual filesystem.
description ioc Process File opened for reading /proc/sys/vm/overcommit_memory linx File opened for reading /proc/1561 linx File opened for reading /proc/1561/status linx