Analysis
-
max time kernel
136s -
max time network
141s -
platform
ubuntu-20.04_amd64 -
resource
ubuntu2004-amd64-20240508-en -
resource tags
arch:amd64arch:i386image:ubuntu2004-amd64-20240508-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system -
submitted
22-05-2024 01:28
Behavioral task
behavioral1
Sample
4499d7e6e086213e7a533c0cf255609bcae758346516c4ab072b4855fef1f602.elf
Resource
ubuntu2004-amd64-20240508-en
ubuntu-20.04-amd64
2 signatures
150 seconds
General
-
Target
4499d7e6e086213e7a533c0cf255609bcae758346516c4ab072b4855fef1f602.elf
-
Size
73KB
-
MD5
f7f02373405eb8a3234e4aa89fd9cef3
-
SHA1
e10ade28df682b3335f8910c2e8e79630fd480fb
-
SHA256
4499d7e6e086213e7a533c0cf255609bcae758346516c4ab072b4855fef1f602
-
SHA512
cb2ae0a96bde537797493b49704503e1e1b567f3a92db315f461a5558ae02b2fd947b48ef2dd6d5702279602243d516129d55edbaaa1ed6cc7e0956e9980932d
-
SSDEEP
1536:BWtxiwbQNWUIFN0Ij73QYRvcCRVbMx9xOg1xHJQYApWloUpjiahEyyFtEs6A:4txeNWfFN/j7lvcC3Ix9xOgvJDxaUpjc
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
Processes:
pid 1392 -
Changes its process name 1 IoCs
Processes:
4499d7e6e086213e7a533c0cf255609bcae758346516c4ab072b4855fef1f602.elfdescription ioc pid process Changes the process name, possibly in an attempt to hide itself httpd 1391 4499d7e6e086213e7a533c0cf255609bcae758346516c4ab072b4855fef1f602.elf