Analysis
-
max time kernel
141s -
max time network
149s -
platform
ubuntu-24.04_amd64 -
resource
ubuntu2404-amd64-20240523-en -
resource tags
arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system -
submitted
27-12-2024 02:22
Behavioral task
behavioral1
Sample
5e0bf4cb5e267eacdad0681934369a646db7abb39e4f32b0c6f23f88def4e890.elf
Resource
ubuntu2404-amd64-20240523-en
ubuntu-24.04-amd64
2 signatures
150 seconds
General
-
Target
5e0bf4cb5e267eacdad0681934369a646db7abb39e4f32b0c6f23f88def4e890.elf
-
Size
106KB
-
MD5
afafe44e75da13379d6c74e263213913
-
SHA1
7762088cbd13d325664bd38bef5860b4dc3fc4e7
-
SHA256
5e0bf4cb5e267eacdad0681934369a646db7abb39e4f32b0c6f23f88def4e890
-
SHA512
938f2474741e445dc8fea3c3cd23b2d5c4340a3ddc454c45e3b8917bf612174e8a13520a0f21b007d631b309889e06e363ccfccf5dd5e0b072c7a3359b921e48
-
SSDEEP
3072:j6dye4BmJQRphaZw/1vc45AzkSXmdRWaLHgb4:dRphaZcErmdRWaDgb4
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route 5e0bf4cb5e267eacdad0681934369a646db7abb39e4f32b0c6f23f88def4e890.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route 5e0bf4cb5e267eacdad0681934369a646db7abb39e4f32b0c6f23f88def4e890.elf