Analysis
- max time kernel
149s - max time network
151s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260513-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
16/08/2026, 02:56
General
- Target a84e58b7363b8a685f7740e228349d204041287d5e160571c724bd80e85a05f2
- Size 94KB
- Sample260816-dfdrfacj8v
- SHA256 a84e58b7363b8a685f7740e228349d204041287d5e160571c724bd80e85a05f2
- MD5 97ad7c532fb35d280228b7226851d417
- SHA1 44f296d20a65a96f4a010e884601f3c43a2cfbd7
- SHA512 42a7e18d494526b307dc7661bc4a2b6a6575af48a42f462db599b9e565b6bc6990f17ae249d5f0748de2b97f398dcf8fe688a636ff61041c21398267d98abbd6
- SSDEEP 1536:MrOiwR1lgnK1qWuMOWJ+a5MZ/0uVMmqbDqg1O6RxPmmq+P0Gz+JwLfvKm:MrURcKthOWJN5MRFeDbFBxPmmJP0Gz+y
- TLSH T1A2932B46F743C6B3C8431BB10297AA690931F97A0A2E9F4AF31D3CF4AB134D97116B56
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route a84e58b7363b8a685f7740e228349d204041287d5e160571c724bd80e85a05f2 - Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
description ioc Process File opened for reading /proc/cpuinfo a84e58b7363b8a685f7740e228349d204041287d5e160571c724bd80e85a05f2 - Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route a84e58b7363b8a685f7740e228349d204041287d5e160571c724bd80e85a05f2