Analysis
-
max time kernel
149s -
max time network
153s -
platform
ubuntu-22.04_amd64 -
resource
ubuntu2204-amd64-20240522.1-en -
resource tags
arch:amd64arch:i386image:ubuntu2204-amd64-20240522.1-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system -
submitted
03/08/2024, 02:14
Behavioral task
behavioral1
Sample
cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf
Resource
ubuntu2204-amd64-20240522.1-en
ubuntu-22.04-amd64
3 signatures
150 seconds
General
-
Target
cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf
-
Size
136KB
-
MD5
0af64d9597f499563abbeeeb8e2e1ad1
-
SHA1
be42241dfbfa3691419b2f8ca63e1aff28366565
-
SHA256
cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038
-
SHA512
d862490819a101185dd556559d84484f5e69afe15e10009e4f8852819711438820e57cd668a872ecf6fcc17d9519e5fdef0bdb7478e872f61d6f0be75496b321
-
SSDEEP
3072:tGtwnNiaOnUTNFiPT9OSQ7AOaogjV2iZlBWCgxiALQPdL:tGtwnNiaOnUTTuLy7LQPd
Score
6/10
Malware Config
Signatures
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself a- M" ! 1563 cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf -
Reads runtime system information 64 IoCs
Reads data from /proc virtual filesystem.
description ioc Process File opened for reading /proc/75/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/609/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/13/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/80/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/197/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/588/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/1061/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/775/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/1037/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/1131/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/25/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/220/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/227/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/748/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/6/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/1347/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/634/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/377/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/509/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/732/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/937/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/1247/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/82/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/95/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/1168/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/1484/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/101/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/407/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/16/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/74/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/1114/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/1259/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/1281/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/1436/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/643/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/1073/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/263/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/413/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/1076/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/1561/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/1158/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/11/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/93/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/114/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/587/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/1097/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/9/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/668/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/1159/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/1222/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/76/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/415/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/5/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/90/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/218/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/1144/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/119/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/212/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/418/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/214/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/536/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/1090/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/1106/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf File opened for reading /proc/210/cmdline cc2564ca195391f08b42f023a7255f0367048899e11825863dd2fd7a348f9038.elf