Analysis
-
max time kernel
147s -
max time network
149s -
platform
ubuntu-22.04_amd64 -
resource
ubuntu2204-amd64-20240522.1-en -
resource tags
arch:amd64arch:i386image:ubuntu2204-amd64-20240522.1-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system -
submitted
06-12-2024 21:27
Behavioral task
behavioral1
Sample
Aqua.dbg.elf
Resource
ubuntu2204-amd64-20240522.1-en
ubuntu-22.04-amd64
4 signatures
150 seconds
General
-
Target
Aqua.dbg.elf
-
Size
175KB
-
MD5
1053d0bc2486dc174d10ce0197a89bc3
-
SHA1
1fb25424190e79c47fe6105c3c08ae921e0efa01
-
SHA256
b3ed3211a73bc80c547f9b689831ad53d6cf8c3ca80f1e9834b243d7575b5ec2
-
SHA512
f45082068b5cbb2392aaa1331c764a8b1d476206e08da7feef87dbb9ff2dbad27905a0e08b32bdbbfc711dbbdb3909c7c64ae2c22af9fb1ae4cc445dbce7a311
-
SSDEEP
3072:/uA2EHbHvvPPgSdLaGCx52/KorCB89FQu1ioQMfr4s3aV8/56vU/U:/u3EHbHvvPPXdLox52PjkssvU8
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid Process 1552 Aqua.dbg.elf -
Enumerates running processes
Discovers information about currently running processes on the system
-
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself httpd 1552 Aqua.dbg.elf -
description ioc Process File opened for reading /proc/224/cmdline Aqua.dbg.elf File opened for reading /proc/585/cmdline Aqua.dbg.elf File opened for reading /proc/586/cmdline Aqua.dbg.elf File opened for reading /proc/1160/cmdline Aqua.dbg.elf File opened for reading /proc/24/cmdline Aqua.dbg.elf File opened for reading /proc/1158/cmdline Aqua.dbg.elf File opened for reading /proc/613/cmdline Aqua.dbg.elf File opened for reading /proc/962/cmdline Aqua.dbg.elf File opened for reading /proc/633/cmdline Aqua.dbg.elf File opened for reading /proc/640/cmdline Aqua.dbg.elf File opened for reading /proc/664/cmdline Aqua.dbg.elf File opened for reading /proc/794/cmdline Aqua.dbg.elf File opened for reading /proc/993/cmdline Aqua.dbg.elf File opened for reading /proc/15/cmdline Aqua.dbg.elf File opened for reading /proc/113/cmdline Aqua.dbg.elf File opened for reading /proc/416/cmdline Aqua.dbg.elf File opened for reading /proc/1066/cmdline Aqua.dbg.elf File opened for reading /proc/1085/cmdline Aqua.dbg.elf File opened for reading /proc/1111/cmdline Aqua.dbg.elf File opened for reading /proc/96/cmdline Aqua.dbg.elf File opened for reading /proc/263/cmdline Aqua.dbg.elf File opened for reading /proc/518/cmdline Aqua.dbg.elf File opened for reading /proc/86/cmdline Aqua.dbg.elf File opened for reading /proc/216/cmdline Aqua.dbg.elf File opened for reading /proc/377/cmdline Aqua.dbg.elf File opened for reading /proc/9/cmdline Aqua.dbg.elf File opened for reading /proc/13/cmdline Aqua.dbg.elf File opened for reading /proc/14/cmdline Aqua.dbg.elf File opened for reading /proc/220/cmdline Aqua.dbg.elf File opened for reading /proc/638/cmdline Aqua.dbg.elf File opened for reading /proc/772/cmdline Aqua.dbg.elf File opened for reading /proc/18/cmdline Aqua.dbg.elf File opened for reading /proc/19/cmdline Aqua.dbg.elf File opened for reading /proc/80/cmdline Aqua.dbg.elf File opened for reading /proc/639/cmdline Aqua.dbg.elf File opened for reading /proc/1177/cmdline Aqua.dbg.elf File opened for reading /proc/78/cmdline Aqua.dbg.elf File opened for reading /proc/81/cmdline Aqua.dbg.elf File opened for reading /proc/208/cmdline Aqua.dbg.elf File opened for reading /proc/164/cmdline Aqua.dbg.elf File opened for reading /proc/314/cmdline Aqua.dbg.elf File opened for reading /proc/3/cmdline Aqua.dbg.elf File opened for reading /proc/25/cmdline Aqua.dbg.elf File opened for reading /proc/97/cmdline Aqua.dbg.elf File opened for reading /proc/214/cmdline Aqua.dbg.elf File opened for reading /proc/731/cmdline Aqua.dbg.elf File opened for reading /proc/1175/cmdline Aqua.dbg.elf File opened for reading /proc/1163/cmdline Aqua.dbg.elf File opened for reading /proc/21/cmdline Aqua.dbg.elf File opened for reading /proc/27/cmdline Aqua.dbg.elf File opened for reading /proc/114/cmdline Aqua.dbg.elf File opened for reading /proc/6/cmdline Aqua.dbg.elf File opened for reading /proc/88/cmdline Aqua.dbg.elf File opened for reading /proc/740/cmdline Aqua.dbg.elf File opened for reading /proc/7/cmdline Aqua.dbg.elf File opened for reading /proc/163/cmdline Aqua.dbg.elf File opened for reading /proc/1039/cmdline Aqua.dbg.elf File opened for reading /proc/222/cmdline Aqua.dbg.elf File opened for reading /proc/593/cmdline Aqua.dbg.elf File opened for reading /proc/73/cmdline Aqua.dbg.elf File opened for reading /proc/90/cmdline Aqua.dbg.elf File opened for reading /proc/92/cmdline Aqua.dbg.elf File opened for reading /proc/225/cmdline Aqua.dbg.elf File opened for reading /proc/415/cmdline Aqua.dbg.elf