General
- Target nfs
- Size 175KB
- Sample261023-apbfwsbh47
- SHA256 0c5486f06620e26e316f4b33f318b0d646d5e1133789331aa2fed012360d1486
- MD5 b61a098fc62a2c2696e196dca78da71a
- SHA1 c472dab4ff7c16782a8037f988d4daa6d4bdb343
- SHA512 4b2fc262da4dc7a64e9b947213960663c52e9ebccc7ef81c263e51b4e44d592375da5c1a08503323b36145b25654245c939e29af006dabbf6a3f07de4dcccd29
- SSDEEP 3072:zjKH2VJga3zK7zRe6Dy0murBDp/OrdZhaPEj8RK6TybKOwNahJlhT2:fiFv00XrL/OBaPHLTybl/K
- TLSH T197043A02B58194FED0C6C1708FAFD137A772F49D62307E9E3B942F692E26E215E1A750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
nfs
Resource
ubuntu1804-amd64-20261019-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target nfs
- Size 175KB
- SHA256 0c5486f06620e26e316f4b33f318b0d646d5e1133789331aa2fed012360d1486
- MD5 b61a098fc62a2c2696e196dca78da71a
- SHA1 c472dab4ff7c16782a8037f988d4daa6d4bdb343
- SHA512 4b2fc262da4dc7a64e9b947213960663c52e9ebccc7ef81c263e51b4e44d592375da5c1a08503323b36145b25654245c939e29af006dabbf6a3f07de4dcccd29
- SSDEEP 3072:zjKH2VJga3zK7zRe6Dy0murBDp/OrdZhaPEj8RK6TybKOwNahJlhT2:fiFv00XrL/OBaPHLTybl/K
- TLSH T197043A02B58194FED0C6C1708FAFD137A772F49D62307E9E3B942F692E26E215E1A750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads process memory
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.