Analysis
-
max time kernel
149s -
max time network
136s -
platform
ubuntu-22.04_amd64 -
resource
ubuntu2204-amd64-20240522.1-en -
resource tags
arch:amd64arch:i386image:ubuntu2204-amd64-20240522.1-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system -
submitted
14-10-2024 09:20
Static task
static1
Behavioral task
behavioral1
Sample
70b15d619bfd1105a68c6931b4b87c69bdedc7634cfe0e2b5fd9ecd991106022.elf
Resource
ubuntu2204-amd64-20240522.1-en
4 signatures
150 seconds
General
-
Target
70b15d619bfd1105a68c6931b4b87c69bdedc7634cfe0e2b5fd9ecd991106022.elf
-
Size
88KB
-
MD5
44dbfede755657975902e5aa27f64ab5
-
SHA1
557ef9acd901def83fb9b361fe249ae021d03805
-
SHA256
70b15d619bfd1105a68c6931b4b87c69bdedc7634cfe0e2b5fd9ecd991106022
-
SHA512
67c1149764703a148fec5d1e4c46c0e04d6888f9b55076f9e5131e8d85ff228c8c9d2294dc5476dfc704c37447ddc0aa47e4887b7a639b845a79e0f509c55944
-
SSDEEP
1536:mPVa04qPbpnU4y6iN/+qGv5y3j39AVTGZ+MO/yaSCLosF:sI04qPbpU4viN/+qGv8zCViZ+bazns
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid Process 1559 70b15d619bfd1105a68c6931b4b87c69bdedc7634cfe0e2b5fd9ecd991106022.elf -
Traces itself 2 IoCs
Traces itself to prevent debugging attempts
pid Process 1559 70b15d619bfd1105a68c6931b4b87c69bdedc7634cfe0e2b5fd9ecd991106022.elf 1563 70b15d619bfd1105a68c6931b4b87c69bdedc7634cfe0e2b5fd9ecd991106022.elf -
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself httpd 1559 70b15d619bfd1105a68c6931b4b87c69bdedc7634cfe0e2b5fd9ecd991106022.elf -
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/70b15d619bfd1105a68c6931b4b87c69bdedc7634cfe0e2b5fd9ecd991106022.elf 70b15d619bfd1105a68c6931b4b87c69bdedc7634cfe0e2b5fd9ecd991106022.elf