Analysis
-
max time kernel
0s -
max time network
129s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240508-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240508-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
30-12-2024 02:11
Behavioral task
behavioral1
Sample
3490c02550d5d70c0900ac64d14b4ef284e0ad0fae16fdb6765d1d66baade075.elf
Resource
ubuntu1804-amd64-20240508-en
ubuntu-18.04-amd64
2 signatures
150 seconds
General
-
Target
3490c02550d5d70c0900ac64d14b4ef284e0ad0fae16fdb6765d1d66baade075.elf
-
Size
89KB
-
MD5
a6711697e9f9c62231055e6fcd0f5aaa
-
SHA1
13bf930b16482cc962a91743e93bed305b397408
-
SHA256
3490c02550d5d70c0900ac64d14b4ef284e0ad0fae16fdb6765d1d66baade075
-
SHA512
90b75abd44983cf89e3b9d2ff5bff05e3aca9f9d95b4dd374c783ec3d6ef52159430d40f97440cd1abf0ac5ed20fd8ae5d01f99129cecc23b4b791f5eef34946
-
SSDEEP
1536:607w/RvCwk931F8JN5fjp7LhNSk1Q2cN9BvnaoetMP80K09lNy3owBYK1s6koEiP:60EJqwk9FFKN5fjpfSk1WBvnaoer0jNm
Score
6/10
Malware Config
Signatures
-
Enumerates active TCP sockets 1 TTPs 1 IoCs
Gets active TCP sockets from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/tcp 3490c02550d5d70c0900ac64d14b4ef284e0ad0fae16fdb6765d1d66baade075.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/tcp 3490c02550d5d70c0900ac64d14b4ef284e0ad0fae16fdb6765d1d66baade075.elf