Analysis
-
max time kernel
106s -
max time network
128s -
platform
ubuntu-22.04_amd64 -
resource
ubuntu2204-amd64-20240611-en -
resource tags
arch:amd64arch:i386image:ubuntu2204-amd64-20240611-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system -
submitted
15-12-2024 01:46
Behavioral task
behavioral1
Sample
11006e12b11f9855795c44b328bd2dbcb75f12e0eab84f04f7d16b5996e857d0.elf
Resource
ubuntu2204-amd64-20240611-en
ubuntu-22.04-amd64
2 signatures
150 seconds
General
-
Target
11006e12b11f9855795c44b328bd2dbcb75f12e0eab84f04f7d16b5996e857d0.elf
-
Size
92KB
-
MD5
c5f57160a1e62fedc1906e8f080d94f0
-
SHA1
56505da441ef10f038418676c225ca923366fa8a
-
SHA256
11006e12b11f9855795c44b328bd2dbcb75f12e0eab84f04f7d16b5996e857d0
-
SHA512
67c2633a1729c02e9a6431d5c6e831f7621e560d00a7add8c2d7e8fba91e8aa99df90ac6f6c1f67ef70499fe2aded61c7b7521120fbbac2b15f5816ebacab2e0
-
SSDEEP
1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3sMtukmA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjK8Mvm/KWOXF7Y
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route 11006e12b11f9855795c44b328bd2dbcb75f12e0eab84f04f7d16b5996e857d0.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route 11006e12b11f9855795c44b328bd2dbcb75f12e0eab84f04f7d16b5996e857d0.elf