Analysis
-
max time kernel
149s -
max time network
134s -
platform
ubuntu-20.04_amd64 -
resource
ubuntu2004-amd64-20241127-en -
resource tags
arch:amd64arch:i386image:ubuntu2004-amd64-20241127-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system -
submitted
10-12-2024 03:41
Behavioral task
behavioral1
Sample
e5f0827ec098a78ab74ca7fa6b129330acaed4e2fa005d0c3a590f6d479d5e4a.elf
Resource
ubuntu2004-amd64-20241127-en
ubuntu-20.04-amd64
2 signatures
150 seconds
General
-
Target
e5f0827ec098a78ab74ca7fa6b129330acaed4e2fa005d0c3a590f6d479d5e4a.elf
-
Size
118KB
-
MD5
a40eb9d6b26d3a809958741610892112
-
SHA1
b6fd7c54e8805e6e9c74f9557bcf3c7750c5386a
-
SHA256
e5f0827ec098a78ab74ca7fa6b129330acaed4e2fa005d0c3a590f6d479d5e4a
-
SHA512
c1e6be1af8773d1723a1e33c1e84322c6985e6bb7ac046bf09bf7e369854cc75fff05613e2922e061ef0b75de1097ab9335d6e1083f80829f88323ca2722b584
-
SSDEEP
3072:xMxB5Tc9xfHxFScXcki+TMoc6Qgmom0ea7HWvP:Cxs9x/gkjLGom0eaTWvP
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route e5f0827ec098a78ab74ca7fa6b129330acaed4e2fa005d0c3a590f6d479d5e4a.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route e5f0827ec098a78ab74ca7fa6b129330acaed4e2fa005d0c3a590f6d479d5e4a.elf