Resubmissions
02/05/2024, 13:21
240502-qll18ahg3s709/04/2024, 12:32
240409-pql2caac4v809/04/2024, 11:57
240409-n41afsed37708/04/2024, 11:38
240408-nr43wagb76702/04/2024, 11:55
240402-n3f57ahb3s727/03/2024, 13:16
240327-qhx93sga5v725/03/2024, 07:32
240325-jczgmade81713/03/2024, 10:09
240313-l6zetsag217General
- Target 5fa7595c38e29ad36ff3ec76bf266f9c391510f773c7d8b43555db534332d763_patched_pkey_5
- Size 8.1MB
- Sample240409-n41afsed37
- SHA256 471c70b6764c6f719bab35b92678e323d53928a14617737a6fc994dc27d2a12e
- MD5 e0efd46445731c6c35deffe8d9e47888
- SHA1 219a2cc1df97fe0b51244f7238aa4114e858f1d0
- SHA512 92a5438489316593f45f4afeca6e2a1654e75480f4670f58df5cb63091ec52dd8279b156a3949e2243dc350dbe31220b2ac433abb4250ddc238f70d295d1949d
- SSDEEP 49152:az1q8M+srb/TIvO90dL3BmAFd4A64nsfJrYJaRM6CxN4+WqFottdpaCEy4SahdBV:auM2GebQyF66rNdvEoS5
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
5fa7595c38e29ad36ff3ec76bf266f9c391510f773c7d8b43555db534332d763_patched_pkey_5
Resource
ubuntu1804-amd64-20240226-en
8 signatures
300 seconds
Malware Config
Targets
-
- Target 5fa7595c38e29ad36ff3ec76bf266f9c391510f773c7d8b43555db534332d763_patched_pkey_5
- Size 8.1MB
- SHA256 471c70b6764c6f719bab35b92678e323d53928a14617737a6fc994dc27d2a12e
- MD5 e0efd46445731c6c35deffe8d9e47888
- SHA1 219a2cc1df97fe0b51244f7238aa4114e858f1d0
- SHA512 92a5438489316593f45f4afeca6e2a1654e75480f4670f58df5cb63091ec52dd8279b156a3949e2243dc350dbe31220b2ac433abb4250ddc238f70d295d1949d
- SSDEEP 49152:az1q8M+srb/TIvO90dL3BmAFd4A64nsfJrYJaRM6CxN4+WqFottdpaCEy4SahdBV:auM2GebQyF66rNdvEoS5
- MD5 SHA1 SHA512 SSDEEP
Score7/10Deletes itself
Attempts to change immutable files
Modifies inode attributes on the filesystem to allow changing of immutable files.
Checks CPU configuration
Checks CPU information which indicate if the system is a virtual machine.
Enumerates running processes
Discovers information about currently running processes on the system
Reads CPU attributes