Resubmissions
02-11-2023 08:30
231102-kec7vabe32 702-11-2023 08:11
231102-j3c2babc67 713-08-2022 12:40
220813-pwnr5acdg5 5Analysis
-
max time kernel
0s -
max time network
26s -
platform
linux_amd64 -
resource
ubuntu1804-amd64-en-20211208 -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
13-08-2022 12:40
Static task
static1
Behavioral task
behavioral1
Sample
aktiun
Resource
ubuntu1804-amd64-en-20211208
1 signatures
150 seconds
General
-
Target
aktiun
-
Size
7.9MB
-
MD5
f83d9b27b1062cac3fe4020da4d4cdd2
-
SHA1
2cae27073004b3ceb3015c9078583d83732a8dc7
-
SHA256
132c2d111dc80c1076d9a0148d20b9e56ba3b130c15b249c56139505a5a84807
-
SHA512
7b760225512c0d7bf71ac8f7b2fe9c0b519072dc07b316398eb507c4baab6f3a8e0cb034cd1ebf87f8b376cf675bb281e696861427155b9ab7f45b8db25c340f
Score
5/10
Malware Config
Signatures
-
Writes file to tmp directory 27 IoCs
Malware often drops required files in the /tmp directory.
Processes:
aktiunaktiundescription ioc process /tmp/onefile_570_1638981834_133813/_codecs_iso2022.so /tmp/onefile_570_1638981834_133813/_codecs_iso2022.so aktiun /tmp/onefile_570_1638981834_133813/_multibytecodec.so /tmp/onefile_570_1638981834_133813/_multibytecodec.so aktiun /tmp/onefile_570_1638981834_133813/tls/haswell/x86_64/libdl.so.2 /tmp/onefile_570_1638981834_133813/tls/haswell/x86_64/libdl.so.2 aktiun /tmp/onefile_570_1638981834_133813/libm.so.6 /tmp/onefile_570_1638981834_133813/libm.so.6 aktiun /tmp/onefile_570_1638981834_133813/tls/x86_64/libdl.so.2 /tmp/onefile_570_1638981834_133813/tls/x86_64/libdl.so.2 aktiun /tmp/onefile_570_1638981834_133813/libz.so.1 /tmp/onefile_570_1638981834_133813/libz.so.1 aktiun /tmp/onefile_570_1638981834_133813/libpthread.so.0 /tmp/onefile_570_1638981834_133813/libpthread.so.0 aktiun /tmp/onefile_570_1638981834_133813 /tmp/onefile_570_1638981834_133813 aktiun /tmp/aktiun /tmp/aktiun aktiun /tmp/onefile_570_1638981834_133813/_codecs_cn.so /tmp/onefile_570_1638981834_133813/_codecs_cn.so aktiun /tmp/onefile_570_1638981834_133813/_codecs_tw.so /tmp/onefile_570_1638981834_133813/_codecs_tw.so aktiun /tmp/onefile_570_1638981834_133813/libexpat.so.1 /tmp/onefile_570_1638981834_133813/libexpat.so.1 aktiun /tmp/onefile_570_1638981834_133813/_codecs_hk.so /tmp/onefile_570_1638981834_133813/_codecs_hk.so aktiun /tmp/onefile_570_1638981834_133813/_codecs_kr.so /tmp/onefile_570_1638981834_133813/_codecs_kr.so aktiun /tmp/onefile_570_1638981834_133813/tls/haswell/libdl.so.2 /tmp/onefile_570_1638981834_133813/tls/haswell/libdl.so.2 aktiun /tmp/onefile_570_1638981834_133813/libdl.so.2 /tmp/onefile_570_1638981834_133813/libdl.so.2 aktiun /tmp/onefile_570_1638981834_133813/aktiun /tmp/onefile_570_1638981834_133813/aktiun aktiun /tmp/onefile_570_1638981834_133813/_opcode.so /tmp/onefile_570_1638981834_133813/_opcode.so aktiun /tmp/onefile_570_1638981834_133813/x86_64/libdl.so.2 /tmp/onefile_570_1638981834_133813/x86_64/libdl.so.2 aktiun /tmp/onefile_570_1638981834_133813/_codecs_jp.so /tmp/onefile_570_1638981834_133813/_codecs_jp.so aktiun /tmp/onefile_570_1638981834_133813/tls/libdl.so.2 /tmp/onefile_570_1638981834_133813/tls/libdl.so.2 aktiun /tmp/onefile_570_1638981834_133813/libexpat.so.1 /tmp/onefile_570_1638981834_133813/libexpat.so.1 aktiun /tmp/onefile_570_1638981834_133813/libc.so.6 /tmp/onefile_570_1638981834_133813/libc.so.6 aktiun /tmp/onefile_570_1638981834_133813/haswell/x86_64/libdl.so.2 /tmp/onefile_570_1638981834_133813/haswell/x86_64/libdl.so.2 aktiun /tmp/onefile_570_1638981834_133813/haswell/libdl.so.2 /tmp/onefile_570_1638981834_133813/haswell/libdl.so.2 aktiun /tmp/onefile_570_1638981834_133813/libz.so.1 /tmp/onefile_570_1638981834_133813/libz.so.1 aktiun /tmp/onefile_570_1638981834_133813/libutil.so.1 /tmp/onefile_570_1638981834_133813/libutil.so.1 aktiun