Analysis
-
max time kernel
39s -
max time network
40s -
platform
ubuntu-20.04_amd64 -
resource
ubuntu2004-amd64-20240221-en -
resource tags
arch:amd64arch:i386image:ubuntu2004-amd64-20240221-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system -
submitted
19/04/2024, 20:03
Behavioral task
behavioral1
Sample
debug.dbg
Resource
ubuntu2004-amd64-20240221-en
3 signatures
150 seconds
General
-
Target
debug.dbg
-
Size
106KB
-
MD5
a8d013187a753f5cc48cdb272c776f9d
-
SHA1
e7e8f58525414afda05c11d802822c8e5fd01d35
-
SHA256
87457bb32f84b446a8690c042959b89ed31f090d9fdabe3211e34bf14e6c21b6
-
SHA512
d48557206b4f3ac7d1a64d058dc9d23f259cb61347b5bdbcbc9d2dffebdd0e7d8d676f320e26a776d05cba0ec85c4274e44ea3a3252ac8fed3d5306fd6b4e60a
-
SSDEEP
3072:O1iOep8X1gMhg4VqkODjb9sG/H0USyA/r91kk:O1iOep8X1gMhg4VRMt9URz91k
Score
6/10
Malware Config
Signatures
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Changes its process name 1 IoCs
description pid Process Changes the process name, possibly in an attempt to hide itself 1465 debug.dbg -
Reads runtime system information 64 IoCs
Reads data from /proc virtual filesystem.
description ioc Process File opened for reading /proc/1098/cmdline debug.dbg File opened for reading /proc/1415/cmdline debug.dbg File opened for reading /proc/1426/cmdline debug.dbg File opened for reading /proc/1561/cmdline debug.dbg File opened for reading /proc/1700/cmdline debug.dbg File opened for reading /proc/116/cmdline debug.dbg File opened for reading /proc/1502/cmdline debug.dbg File opened for reading /proc/1614/cmdline debug.dbg File opened for reading /proc/1641/cmdline debug.dbg File opened for reading /proc/963/cmdline debug.dbg File opened for reading /proc/273/cmdline debug.dbg File opened for reading /proc/1559/cmdline debug.dbg File opened for reading /proc/1620/cmdline debug.dbg File opened for reading /proc/79/cmdline debug.dbg File opened for reading /proc/170/cmdline debug.dbg File opened for reading /proc/1090/cmdline debug.dbg File opened for reading /proc/1095/cmdline debug.dbg File opened for reading /proc/1558/cmdline debug.dbg File opened for reading /proc/1587/cmdline debug.dbg File opened for reading /proc/1606/cmdline debug.dbg File opened for reading /proc/1621/cmdline debug.dbg File opened for reading /proc/130/cmdline debug.dbg File opened for reading /proc/1715/cmdline debug.dbg File opened for reading /proc/1496/cmdline debug.dbg File opened for reading /proc/1503/cmdline debug.dbg File opened for reading /proc/1656/cmdline debug.dbg File opened for reading /proc/1420/cmdline debug.dbg File opened for reading /proc/163/cmdline debug.dbg File opened for reading /proc/1105/cmdline debug.dbg File opened for reading /proc/1445/cmdline debug.dbg File opened for reading /proc/93/cmdline debug.dbg File opened for reading /proc/835/cmdline debug.dbg File opened for reading /proc/1465/cmdline debug.dbg File opened for reading /proc/84/cmdline debug.dbg File opened for reading /proc/1515/cmdline debug.dbg File opened for reading /proc/1564/cmdline debug.dbg File opened for reading /proc/1566/cmdline debug.dbg File opened for reading /proc/1425/cmdline debug.dbg File opened for reading /proc/1497/cmdline debug.dbg File opened for reading /proc/1458/cmdline debug.dbg File opened for reading /proc/1052/cmdline debug.dbg File opened for reading /proc/1120/cmdline debug.dbg File opened for reading /proc/1414/cmdline debug.dbg File opened for reading /proc/1578/cmdline debug.dbg File opened for reading /proc/1655/cmdline debug.dbg File opened for reading /proc/92/cmdline debug.dbg File opened for reading /proc/160/cmdline debug.dbg File opened for reading /proc/902/cmdline debug.dbg File opened for reading /proc/1494/cmdline debug.dbg File opened for reading /proc/1576/cmdline debug.dbg File opened for reading /proc/1699/cmdline debug.dbg File opened for reading /proc/14/cmdline debug.dbg File opened for reading /proc/1044/cmdline debug.dbg File opened for reading /proc/1540/cmdline debug.dbg File opened for reading /proc/1552/cmdline debug.dbg File opened for reading /proc/1556/cmdline debug.dbg File opened for reading /proc/19/cmdline debug.dbg File opened for reading /proc/400/cmdline debug.dbg File opened for reading /proc/1035/cmdline debug.dbg File opened for reading /proc/1453/cmdline debug.dbg File opened for reading /proc/1582/cmdline debug.dbg File opened for reading /proc/165/cmdline debug.dbg File opened for reading /proc/82/cmdline debug.dbg File opened for reading /proc/455/cmdline debug.dbg