Analysis
-
max time kernel
140s -
max time network
151s -
platform
ubuntu-20.04_amd64 -
resource
ubuntu2004-amd64-20241127-en -
resource tags
arch:amd64arch:i386image:ubuntu2004-amd64-20241127-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system -
submitted
07-12-2024 03:12
Behavioral task
behavioral1
Sample
a8fe559c4496f75c9af90086635c6f0722610c27094cf9d31c44b448359a74f6.elf
Resource
ubuntu2004-amd64-20241127-en
ubuntu-20.04-amd64
2 signatures
150 seconds
General
-
Target
a8fe559c4496f75c9af90086635c6f0722610c27094cf9d31c44b448359a74f6.elf
-
Size
155KB
-
MD5
2cfb6543d1b4012f6c6aae0d047363a4
-
SHA1
95a15fecb5bb19a0134fb8a3c2c8f7ce6c595184
-
SHA256
a8fe559c4496f75c9af90086635c6f0722610c27094cf9d31c44b448359a74f6
-
SHA512
7084f46039ea06a3c7e7af1da6178984e297736f8b47279e9c11928586cdbc39862192e24db5886b83f1b95069f5d14930cae2806402b1b1268b579882dcca76
-
SSDEEP
3072:a8L2FlZkCzC2TCX5hGhfDphahpCn38n9VAlZn31mBT38dAY4:Mr1Dphabkm6lmBT38dAY4
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route a8fe559c4496f75c9af90086635c6f0722610c27094cf9d31c44b448359a74f6.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route a8fe559c4496f75c9af90086635c6f0722610c27094cf9d31c44b448359a74f6.elf