Resubmissions
13/07/2024, 02:51
240713-dcketasekn1013/07/2024, 02:49
240713-da59havdnh1013/07/2024, 02:48
240713-daplravdlh1020/01/2022, 07:00
220120-hspfxsgfd510Analysis
- max time kernel
157s - max time network
159s - platform
ubuntu-24.04_amd64 - resource
ubuntu2404-amd64-20240523-en - resource tags
arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system - submitted
13/07/2024, 02:51
Behavioral task
behavioral1
Sample
Josho.x86
Resource
ubuntu2004-amd64-20240508-en
ubuntu-20.04-amd64
6 signatures
600 seconds
Behavioral task
behavioral2
Sample
Josho.x86
Resource
ubuntu2404-amd64-20240523-en
ubuntu-24.04-amd64
2 signatures
600 seconds
General
- Target Josho.x86
- Size 40KB
- Sample240713-dcketasekn
- SHA256 50f798eb3aadfd6966a479b74dff730bc03901ca78792f77e570ee5393f45c51
- MD5 d3bcd7d304ca56b6f685073ae65fd399
- SHA1 ce33c18115e73f32e83c693cf51b8b2aa201e886
- SHA512 9275e05e918712eb0b82b7776f61eb8bb32eb8fe316f85f2fe8082fd5fa36a4199b0e78358eb031fedea0354f6bc15dc809154e9632d983b1884a15b50fd1612
- SSDEEP 768:Ms1yfBjf74x6DhdZMddQmJTy5GgOegYEu0ploF4M4Kj9nK:py5jf74x6DB8mmJTyXgY4ploFX4KjB
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Loads a kernel module 64 IoCs
Loads a Linux kernel module, potentially to achieve persistence
pid Process 2537 Josho.x86 2538 Process not Found 2541 Process not Found 2538 Process not Found 2541 Process not Found 2538 Process not Found 2541 Process not Found 2538 Process not Found 2538 Process not Found 2541 Process not Found 2541 Process not Found 2538 Process not Found 2538 Process not Found 2541 Process not Found 2541 Process not Found 2538 Process not Found 2538 Process not Found 2541 Process not Found 2541 Process not Found 2538 Process not Found 2538 Process not Found 2541 Process not Found 2541 Process not Found 2540 Process not Found 2538 Process not Found 2538 Process not Found 2541 Process not Found 2541 Process not Found 2540 Process not Found 2538 Process not Found 2538 Process not Found 2541 Process not Found 2541 Process not Found 2538 Process not Found 2538 Process not Found 2541 Process not Found 2541 Process not Found 2538 Process not Found 2538 Process not Found 2541 Process not Found 2541 Process not Found 2538 Process not Found 2538 Process not Found 2541 Process not Found 2541 Process not Found 2538 Process not Found 2538 Process not Found 2541 Process not Found 2541 Process not Found 2538 Process not Found 2538 Process not Found 2541 Process not Found 2541 Process not Found 2538 Process not Found 2538 Process not Found 2541 Process not Found 2541 Process not Found 2538 Process not Found 2538 Process not Found 2541 Process not Found 2541 Process not Found 2538 Process not Found 2538 Process not Found 2541 Process not Found - Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/j5ea3n15pah1benoeof Josho.x86