Analysis

  • max time kernel
    0s
  • max time network
    132s
  • platform
    ubuntu-22.04_amd64
  • resource
    ubuntu2204-amd64-20250307-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2204-amd64-20250307-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
  • submitted
    28/03/2025, 13:48

General

  • Target

    torguard-v4.8.29-build.286.1+g70e4e51-amd64-arch/opt/torguard/bin/wstunnel-7_9_2-linux-amd64

  • Size

    31.5MB

  • MD5

    874ef3262d7b8848eee7068218c35345

  • SHA1

    493726fb084eece04bfed3d211f4e984427f39b1

  • SHA256

    3791fab2385b9e994ec73bdd2267de703a94b663263e80229b5fa28894537872

  • SHA512

    e7da676a632777597e9da0adcfba03bea80ebbcf7c6562501e2c4a28f34aeb6f31bdf3a002bf81cab43411c6244e380bf3cd97098b43087ae98423ce6efe9660

  • SSDEEP

    196608:DE/0l2Xj3tw/1qRNuXoGEzm5ThPrSkNc7mg:DE/S2LthU

Score
3/10

Malware Config

Signatures

  • Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

    Reads contents of /sys virtual filesystem to enumerate system information.

  • Reads runtime system information 2 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/torguard-v4.8.29-build.286.1+g70e4e51-amd64-arch/opt/torguard/bin/wstunnel-7_9_2-linux-amd64
    /tmp/torguard-v4.8.29-build.286.1+g70e4e51-amd64-arch/opt/torguard/bin/wstunnel-7_9_2-linux-amd64
    1⤵
    • Enumerates kernel/hardware configuration
    • Reads runtime system information
    PID:1569

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads