Analysis
-
max time kernel
60s -
max time network
129s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240611-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240611-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
14-06-2024 14:23
Static task
static1
Behavioral task
behavioral1
Sample
d_lin_arm
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral2
Sample
d_lin_x32
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral3
Sample
d_lin_x64
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral4
Sample
d_lin_arm_ru
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral5
Sample
d_lin_x32_ru
Resource
ubuntu2204-amd64-20240611-en
Behavioral task
behavioral6
Sample
d_lin_x64_ru
Resource
ubuntu2404-amd64-20240523-en
General
-
Target
d_lin_x32
-
Size
17.2MB
-
MD5
de52d4bc42671d05939e2329298a0816
-
SHA1
de1b3c9b5131c313f95a1a9acb4afdd17f589b6b
-
SHA256
307e3ea1cb140f375443ef3c9b62028dd5c6449c1bf242b83d6db5d730bd2121
-
SHA512
d3b22d3f353044ce142ade747895d5882d3dfc640ae0d1d9cc0a57347dcf716bc3885bef07348b722da52296ab9ae9b200a1476baa227b41cc5ab12daf2b9e17
-
SSDEEP
98304:imZEz5CdXrRA1nY5cygNUtkz2wRayRyQULi3Td01matM+NIfpta7BzeYefXJdO9B:viCh+YvwRayKL8WwaZmfa1UXJIQGum
Malware Config
Signatures
-
Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/kernel/mm/transparent_hugepage/hpage_pmd_size d_lin_x32 -
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
description ioc Process File opened for reading /proc/stat d_lin_x32