Analysis
-
max time kernel
149s -
max time network
151s -
platform
ubuntu-22.04_amd64 -
resource
ubuntu2204-amd64-20240611-en -
resource tags
arch:amd64arch:i386image:ubuntu2204-amd64-20240611-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system -
submitted
19/11/2024, 17:46
Static task
static1
Behavioral task
behavioral1
Sample
mmb1.elf
Resource
ubuntu2204-amd64-20240611-en
ubuntu-22.04-amd64
3 signatures
150 seconds
General
-
Target
mmb1.elf
-
Size
91KB
-
MD5
62b188e7e86a98543be4e59c42851f59
-
SHA1
9fbcc4c8897bf92d320ea1319d539d1a1c9a9e43
-
SHA256
4cae54dc89725471023835a9fbdf32bff74c09754c8b38abc4dbd0c6c2c26495
-
SHA512
a2cfcdaed343b91d917deae8bd52f7059af8001d68e65376727e1cfe551b1bfa67bd14787d5c11b46786f81e9b38bb24cd476459b7c0bdcbbf585e4be94a31c9
-
SSDEEP
1536:oFd1IRgCXUzx7t0fMdlrgQEiyhcg+7ju72wPZnWhZS5xtY+n:oFdmR9XUzxh0fMXrgQEimEjLAdew5bn
Score
6/10
Malware Config
Signatures
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Changes its process name 1 IoCs
description pid Process Changes the process name, possibly in an attempt to hide itself 1583 mmb1.elf -
description ioc Process File opened for reading /proc/16/cmdline mmb1.elf File opened for reading /proc/23/cmdline mmb1.elf File opened for reading /proc/404/cmdline mmb1.elf File opened for reading /proc/409/cmdline mmb1.elf File opened for reading /proc/740/cmdline mmb1.elf File opened for reading /proc/968/cmdline mmb1.elf File opened for reading /proc/1411/cmdline mmb1.elf File opened for reading /proc/15/cmdline mmb1.elf File opened for reading /proc/1593/cmdline mmb1.elf File opened for reading /proc/987/cmdline mmb1.elf File opened for reading /proc/1138/cmdline mmb1.elf File opened for reading /proc/1180/cmdline mmb1.elf File opened for reading /proc/91/cmdline mmb1.elf File opened for reading /proc/499/cmdline mmb1.elf File opened for reading /proc/584/cmdline mmb1.elf File opened for reading /proc/602/cmdline mmb1.elf File opened for reading /proc/4/cmdline mmb1.elf File opened for reading /proc/94/cmdline mmb1.elf File opened for reading /proc/652/cmdline mmb1.elf File opened for reading /proc/725/cmdline mmb1.elf File opened for reading /proc/1031/cmdline mmb1.elf File opened for reading /proc/1096/cmdline mmb1.elf File opened for reading /proc/1122/cmdline mmb1.elf File opened for reading /proc/1569/cmdline mmb1.elf File opened for reading /proc/24/cmdline mmb1.elf File opened for reading /proc/76/cmdline mmb1.elf File opened for reading /proc/212/cmdline mmb1.elf File opened for reading /proc/217/cmdline mmb1.elf File opened for reading /proc/690/cmdline mmb1.elf File opened for reading /proc/766/cmdline mmb1.elf File opened for reading /proc/777/cmdline mmb1.elf File opened for reading /proc/1052/cmdline mmb1.elf File opened for reading /proc/75/cmdline mmb1.elf File opened for reading /proc/1323/cmdline mmb1.elf File opened for reading /proc/1462/cmdline mmb1.elf File opened for reading /proc/1206/cmdline mmb1.elf File opened for reading /proc/1158/cmdline mmb1.elf File opened for reading /proc/373/cmdline mmb1.elf File opened for reading /proc/588/cmdline mmb1.elf File opened for reading /proc/599/cmdline mmb1.elf File opened for reading /proc/1100/cmdline mmb1.elf File opened for reading /proc/1269/cmdline mmb1.elf File opened for reading /proc/88/cmdline mmb1.elf File opened for reading /proc/74/cmdline mmb1.elf File opened for reading /proc/97/cmdline mmb1.elf File opened for reading /proc/832/cmdline mmb1.elf File opened for reading /proc/866/cmdline mmb1.elf File opened for reading /proc/1036/cmdline mmb1.elf File opened for reading /proc/1194/cmdline mmb1.elf File opened for reading /proc/1572/cmdline mmb1.elf File opened for reading /proc/6/cmdline mmb1.elf File opened for reading /proc/307/cmdline mmb1.elf File opened for reading /proc/1156/cmdline mmb1.elf File opened for reading /proc/18/cmdline mmb1.elf File opened for reading /proc/988/cmdline mmb1.elf File opened for reading /proc/1059/cmdline mmb1.elf File opened for reading /proc/1184/cmdline mmb1.elf File opened for reading /proc/1187/cmdline mmb1.elf File opened for reading /proc/731/cmdline mmb1.elf File opened for reading /proc/25/cmdline mmb1.elf File opened for reading /proc/93/cmdline mmb1.elf File opened for reading /proc/99/cmdline mmb1.elf File opened for reading /proc/109/cmdline mmb1.elf File opened for reading /proc/112/cmdline mmb1.elf