Analysis
-
max time kernel
140s -
max time network
147s -
platform
ubuntu-22.04_amd64 -
resource
ubuntu2204-amd64-20250224-en -
resource tags
arch:amd64arch:i386image:ubuntu2204-amd64-20250224-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system -
submitted
26/02/2025, 03:05
Behavioral task
behavioral1
Sample
4d7f9b4bff58cd493caceb0a612bc59ca3f7157840723e6ac0f78c3c6b26e117.elf
Resource
ubuntu2204-amd64-20250224-en
2 signatures
150 seconds
General
-
Target
4d7f9b4bff58cd493caceb0a612bc59ca3f7157840723e6ac0f78c3c6b26e117.elf
-
Size
92KB
-
MD5
3d59714f884dd280807e4947a7b90b1d
-
SHA1
02640a5f418a98882f6968627931ca0536b6456a
-
SHA256
4d7f9b4bff58cd493caceb0a612bc59ca3f7157840723e6ac0f78c3c6b26e117
-
SHA512
6b914ee7d4969e55d68edaf2bfbbe55630b74911ff361036bffd421d5f5e63987fd21674febc65d251590392295648c0d1d1d7c50a08d2a46fd99c170760ad06
-
SSDEEP
1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3UyPXfH0mA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjKEifUm/KWOXFE
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route 4d7f9b4bff58cd493caceb0a612bc59ca3f7157840723e6ac0f78c3c6b26e117.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route 4d7f9b4bff58cd493caceb0a612bc59ca3f7157840723e6ac0f78c3c6b26e117.elf