Analysis
-
max time kernel
149s -
max time network
150s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240611-en -
resource tags
-
submitted
02-01-2025 21:33
General
-
Target
java
-
Size
1.5MB
-
MD5
e2be8944ce24abb4c0ed6858eb8d6157
-
SHA1
a9511dd764080aa0437fb586f2babd1c18214a6a
-
SHA256
59755333ce8c0e16e45340984a22a50f4cb6cb92f8fb85e452dfbec7596a4859
-
SHA512
815bed537eede7461d03b9ffab84b3f77ac43f3d5e47284b4c8a5052ab2eb82bc1563ab7375e3928dfb4a4179096d429143423bd780f2e037ec29ae8a4fee17a
-
SSDEEP
24576:hNJp/2SkgT4KUAopmhDO2Aan9XgnU6tZAf4Nzbm6g+qF2SdYOrhGB+bL+cH8y6LL:hNvOx/Vp/2bn9XgnNtmf28rhObccIwhL
Score
4/10
Malware Config
Signatures
-
Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
-
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/java/tmp/java1⤵
- Checks CPU configuration
- Reads system network configuration
- Reads runtime system information
- Writes file to tmp directory