Analysis
- max time kernel
135s - max time network
145s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20240226-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240226-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
19/04/2024, 01:01
Behavioral task
behavioral1
Sample
2ea2936a42d2190ba30887cac3878f3ed3070cd773e42ca778e3d1350c4e1f6f.elf
Resource
ubuntu1804-amd64-20240226-en
2 signatures
150 seconds
General
- Target 2ea2936a42d2190ba30887cac3878f3ed3070cd773e42ca778e3d1350c4e1f6f.elf
- Size 65KB
- Sample240419-bdk2mada21
- SHA256 2ea2936a42d2190ba30887cac3878f3ed3070cd773e42ca778e3d1350c4e1f6f
- MD5 25a8e0bc115a9b1ba4d74452f93bb857
- SHA1 a0adc732551954f9c763b2c91c5c0d8d16e1af2e
- SHA512 a5b1561f74cf9ff92820f866a5c23e667ae76058f178d45cc0fc2d47bb869114a6304675f363503bb0e4d3edd003aceba66381b7aca285122a0626eca9d6ce20
- SSDEEP 1536:/1wuRt0n27SAqOjONWQ8WEUK1N6t4Ev0ZzgrtHe5QXt4dD:NwuRt0nkSAq0i8WEUJtd0ZQtHe5Q94dD
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself httpd 1568 2ea2936a42d2190ba30887cac3878f3ed3070cd773e42ca778e3d1350c4e1f6f.elf - Deletes itself 1 IoCs
pid Process 1568 2ea2936a42d2190ba30887cac3878f3ed3070cd773e42ca778e3d1350c4e1f6f.elf