Analysis
-
max time kernel
102s -
max time network
128s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240226-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240226-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
25-04-2024 01:56
Behavioral task
behavioral1
Sample
bec34728dcd0fdbee8fb36650712c03e3eceb85d1e2f29f6327106aef783f08c.elf
Resource
ubuntu1804-amd64-20240226-en
General
-
Target
bec34728dcd0fdbee8fb36650712c03e3eceb85d1e2f29f6327106aef783f08c.elf
-
Size
86KB
-
MD5
650dbb829d84cd8761a12bf1ed1afe1e
-
SHA1
92a7f914346ceedb4e0a1f5cc77ae9701c10505d
-
SHA256
bec34728dcd0fdbee8fb36650712c03e3eceb85d1e2f29f6327106aef783f08c
-
SHA512
2a0ca57d3c599fd37305ef84ed225cf5a8ef3f2c5af922e399b2d820624e66a74872248c2c00a3dbd7ba8d2c1fb6837bb3d948c7a5e7f105c7e9973db1de9e68
-
SSDEEP
1536:Jt2KVBUpUNGbO7wpRN5jqZ2fEaae/T2k7lNilCseYFF5m6rjd6VCYjpA:Jt2KjUpUNGbOKjqSaeh7lNiBhmEjdeCh
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
Processes:
bec34728dcd0fdbee8fb36650712c03e3eceb85d1e2f29f6327106aef783f08c.elfdescription ioc process File opened for reading /proc/net/route bec34728dcd0fdbee8fb36650712c03e3eceb85d1e2f29f6327106aef783f08c.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes:
bec34728dcd0fdbee8fb36650712c03e3eceb85d1e2f29f6327106aef783f08c.elfdescription ioc process File opened for reading /proc/net/route bec34728dcd0fdbee8fb36650712c03e3eceb85d1e2f29f6327106aef783f08c.elf