Analysis
-
max time kernel
140s -
max time network
148s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240508-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240508-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
21-05-2024 14:16
Behavioral task
behavioral1
Sample
a00c1b99a0757859ad160c49bbb82ef0bf9f3b07685b1177daa3fb9607b2c8af.elf
Resource
ubuntu1804-amd64-20240508-en
ubuntu-18.04-amd64
2 signatures
150 seconds
General
-
Target
a00c1b99a0757859ad160c49bbb82ef0bf9f3b07685b1177daa3fb9607b2c8af.elf
-
Size
106KB
-
MD5
d5910fb55bb9cb006b93575357a78c6b
-
SHA1
ec8cf9196e90ddad4bde15755884c830b24a9fa7
-
SHA256
a00c1b99a0757859ad160c49bbb82ef0bf9f3b07685b1177daa3fb9607b2c8af
-
SHA512
9d315a62291da50ae46e306c99e1f1723c9e5258330d8bf7ad3cbf11669de303e18ab367fc712b462cb64a41f83d417bf56ed203bc4632318eb6c169d17d025b
-
SSDEEP
3072:oEUVxoss3+8CMpha/+6WBhSXcCyKcm4RWaLHgb4:vubMpha/rXty1m4RWaDgb4
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
Processes:
a00c1b99a0757859ad160c49bbb82ef0bf9f3b07685b1177daa3fb9607b2c8af.elfdescription ioc process File opened for reading /proc/net/route a00c1b99a0757859ad160c49bbb82ef0bf9f3b07685b1177daa3fb9607b2c8af.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes:
a00c1b99a0757859ad160c49bbb82ef0bf9f3b07685b1177daa3fb9607b2c8af.elfdescription ioc process File opened for reading /proc/net/route a00c1b99a0757859ad160c49bbb82ef0bf9f3b07685b1177daa3fb9607b2c8af.elf