Analysis
-
max time kernel
149s -
max time network
153s -
platform
ubuntu-22.04_amd64 -
resource
ubuntu2204-amd64-20240729-en -
resource tags
arch:amd64arch:i386image:ubuntu2204-amd64-20240729-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system -
submitted
18-08-2024 01:37
Static task
static1
Behavioral task
behavioral1
Sample
ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf
Resource
ubuntu2204-amd64-20240729-en
ubuntu-22.04-amd64
3 signatures
150 seconds
General
-
Target
ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf
-
Size
87KB
-
MD5
de2a76494897c5d383ff0db55ad6116a
-
SHA1
e82adcef0ac2047a33932f1d3e3068d96eb0f71f
-
SHA256
ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce
-
SHA512
5fcab611ddd0cdab5ebe889aeeace1c8fd4ca9e69114fb889d0b2e6273663c3ac1d0350b4a7ce593b58ca52031b217e92c6c144832a6eba7454836ae745c9d4c
-
SSDEEP
1536:xpmWc2AcighsZ82fJxfcmHH1mSsM8y6Q+gBQ9TnkISGtAdP0xZ:xpmX2riED2frfxHVmL1Q1Q9kVTP0x
Score
6/10
Malware Config
Signatures
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Changes its process name 1 IoCs
description pid Process Changes the process name, possibly in an attempt to hide itself 1569 ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf -
Reads runtime system information 64 IoCs
Reads data from /proc virtual filesystem.
description ioc Process File opened for reading /proc/613/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/1053/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/1256/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/3/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/7/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/9/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/451/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/594/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/1425/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/1172/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/1275/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/1372/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/1445/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/17/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/95/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/427/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/588/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/1612/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/1570/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/110/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/1131/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/1165/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/1558/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/1333/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/1623/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/589/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/741/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/1038/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/1214/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/622/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/1033/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/1155/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/74/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/98/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/196/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/263/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/26/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/23/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/504/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/838/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/1098/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/1162/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/1559/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/92/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/198/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/214/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/533/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/216/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/635/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/754/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/4/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/22/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/90/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/1603/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/1584/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/1593/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/10/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/315/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/1091/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/1538/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/1/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/19/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/377/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf File opened for reading /proc/1616/cmdline ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce.elf