Analysis
- max time kernel
140s - max time network
149s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260513-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
27/08/2026, 12:20
Behavioral task
behavioral1
Sample
x-3.2-.snoopy
Resource
ubuntu1804-amd64-20260513-en
2 signatures
150 seconds
General
- Target x-3.2-.snoopy
- Size 72KB
- Sample260827-ph23las1cs
- SHA256 3da3643f25fd8ca8bb41502bb212b9f1617187ee8c6fa4e24a7bc2009a45debe
- MD5 e2be77291368d9279ed7379dd05e47cf
- SHA1 f64a28caf56f762c78edc40df0a263a409659e68
- SHA512 fde0951fee6d2e4bd1578a5f58ff064e83e132ee8f5222c767108bcc080dcd3fe6ed20a56f586dfb4494a3a3b4e143ff925e537f2040181e62f7f5abd14533f2
- SSDEEP 1536:nm+c5osQWiKLoxKFn6pD+OTxzM5MmLI2VOCjXUfJRk:45omr0xKFn6J+O6MmU2VOCbUfJRk
- TLSH T145732A02E652CAB3C8930BB602AB9B664631FD2A1E2B9F55F31C7DF49B124C87117355
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route x-3.2-.snoopy - Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route x-3.2-.snoopy