Analysis
- max time kernel
140s - max time network
148s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20261019-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20261019-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
11/11/2026, 16:28
Behavioral task
behavioral1
Sample
2026-11-10_ea83e1619c9ab74cef7b5d379eedcc01_akira_bashlite_dofloo_glassworm_mirai
Resource
ubuntu1804-amd64-20261019-en
2 signatures
150 seconds
General
- Target 2026-11-10_ea83e1619c9ab74cef7b5d379eedcc01_akira_bashlite_dofloo_glassworm_mirai
- Size 2.1MB
- Sample261111-ty4ctaav6x
- SHA256 8990bbed79d1d52b1a02a7d51bdd9dc196c8288933411f71c0a757deaf72174a
- MD5 ea83e1619c9ab74cef7b5d379eedcc01
- SHA1 647006ae025eaeaa797af36c0fdf3a39dbc48152
- SHA512 87021be14c5c53e20af21da028191ed0817f80ddfde6c69a6e9539113b37636c715943b6327a56c3c0fc29280b22fee37b6c5e2e081aa5bbe9972f1bcf3451f0
- SSDEEP 49152:9S5PsizlIU6ipeHfTOVNb1qL58lLjLKfj:91+4HfiV188lO
- TLSH T182A59E5BE390087FCDE25171E5864322BB32F0989322677B1498CAB81F56E74277BBC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route 2026-11-10_ea83e1619c9ab74cef7b5d379eedcc01_akira_bashlite_dofloo_glassworm_mirai - Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route 2026-11-10_ea83e1619c9ab74cef7b5d379eedcc01_akira_bashlite_dofloo_glassworm_mirai