Analysis
-
max time kernel
139s -
max time network
140s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240418-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240418-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
02-05-2024 01:00
Behavioral task
behavioral1
Sample
329c5bd34334e88aa23358b56082068ef4fda6a867e22fedf196715c6ee1525a.elf
Resource
ubuntu1804-amd64-20240418-en
ubuntu-18.04-amd64
2 signatures
150 seconds
General
-
Target
329c5bd34334e88aa23358b56082068ef4fda6a867e22fedf196715c6ee1525a.elf
-
Size
57KB
-
MD5
01201270a158311441ef71566ddf325f
-
SHA1
96580ecae6ee5cf7a76e5dcc49373e43fc27df6e
-
SHA256
329c5bd34334e88aa23358b56082068ef4fda6a867e22fedf196715c6ee1525a
-
SHA512
da32c714dacd77d2465a2fae9100b95ef7a599c197f346a533d1b0537f24bea34bedd131ec8fa1bef6360da68991b1bc55c681e66ced6b029299540c55d95b6c
-
SSDEEP
1536:0RgWI56uIi0hTtcTNcTyV0ULS7WD01jOWmCAM3e0/vHj67FQQH:0Rgd56ViLTNcTyV1LS7WD01zl1O0/PjI
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
Processes:
pid 1539 -
Changes its process name 1 IoCs
Processes:
329c5bd34334e88aa23358b56082068ef4fda6a867e22fedf196715c6ee1525a.elfdescription ioc pid process Changes the process name, possibly in an attempt to hide itself httpd 1538 329c5bd34334e88aa23358b56082068ef4fda6a867e22fedf196715c6ee1525a.elf