Analysis
-
max time kernel
135s -
max time network
135s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240508-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240508-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
22-05-2024 01:32
Behavioral task
behavioral1
Sample
4beb082e0be1920036eafd5fa2d1c3fc22eaa1f42b8e782d1eafe3132e7df97a.elf
Resource
ubuntu1804-amd64-20240508-en
ubuntu-18.04-amd64
2 signatures
150 seconds
General
-
Target
4beb082e0be1920036eafd5fa2d1c3fc22eaa1f42b8e782d1eafe3132e7df97a.elf
-
Size
69KB
-
MD5
3d49877c96cf98ec349a9fee80eea0e8
-
SHA1
09b3dbc930d55ecd063ac05dfb6dd0f801137c43
-
SHA256
4beb082e0be1920036eafd5fa2d1c3fc22eaa1f42b8e782d1eafe3132e7df97a
-
SHA512
a776b6a3929463cdbc5bd889b3899d9cce56e11ccc4ac4d128890e364a8e81073fea868d4e2ccbf06b93907f58366859f4d09c71d0957f8f5f56b8039f545648
-
SSDEEP
1536:/mxp+p2nCoylk/gRvkQz5hk94TpohueDwJBKvBQUhY4bVBeSvQijAgx:vom+gRvkQzRtohUYBFeMVBPA
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
Processes:
pid 1505 -
Changes its process name 1 IoCs
Processes:
4beb082e0be1920036eafd5fa2d1c3fc22eaa1f42b8e782d1eafe3132e7df97a.elfdescription ioc pid process Changes the process name, possibly in an attempt to hide itself httpd 1504 4beb082e0be1920036eafd5fa2d1c3fc22eaa1f42b8e782d1eafe3132e7df97a.elf