Analysis
-
max time kernel
113s -
max time network
129s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240418-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240418-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
30/04/2024, 01:07
Behavioral task
behavioral1
Sample
66b79fcfb763dc11d03de8a1da3e50f9871be1d1e64e805c7dc14e987e4150f2.elf
Resource
ubuntu1804-amd64-20240418-en
2 signatures
150 seconds
General
-
Target
66b79fcfb763dc11d03de8a1da3e50f9871be1d1e64e805c7dc14e987e4150f2.elf
-
Size
139KB
-
MD5
28558da23525f76914895bf4497995e6
-
SHA1
ecb9cd23123716fc0c903930b57c77744a2aced5
-
SHA256
66b79fcfb763dc11d03de8a1da3e50f9871be1d1e64e805c7dc14e987e4150f2
-
SHA512
d1bc353306b4e4e6bec2c35abe105fca558a17ffba3cd34a3dc4227ccb3899a5cbbb2227903f86a1e448cd2a8fe275e22137ef633cbd05a719a58af290dba0fa
-
SSDEEP
3072:yclx0/BSuUiFZPSwwSOyMzm5h6NJeX0mJswdytNr9:y3zbPGzm5hU7mJswdytNr9
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route 66b79fcfb763dc11d03de8a1da3e50f9871be1d1e64e805c7dc14e987e4150f2.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route 66b79fcfb763dc11d03de8a1da3e50f9871be1d1e64e805c7dc14e987e4150f2.elf