Analysis
-
max time kernel
133s -
max time network
145s -
platform
ubuntu-24.04_amd64 -
resource
ubuntu2404-amd64-20240729-en -
resource tags
arch:amd64arch:i386image:ubuntu2404-amd64-20240729-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system -
submitted
09-12-2024 02:43
Behavioral task
behavioral1
Sample
ae156529ee59ea9218d3bbb7760d536e8becff7ff55659f9b723fcdfb1fa7726.elf
Resource
ubuntu2404-amd64-20240729-en
ubuntu-24.04-amd64
2 signatures
150 seconds
General
-
Target
ae156529ee59ea9218d3bbb7760d536e8becff7ff55659f9b723fcdfb1fa7726.elf
-
Size
113KB
-
MD5
5f33f958945dce126f4f18ee23b09162
-
SHA1
11bb26bd016673b201bf56c61087e6727736a971
-
SHA256
ae156529ee59ea9218d3bbb7760d536e8becff7ff55659f9b723fcdfb1fa7726
-
SHA512
e96b2b90261b4d7eeb16f9698c83a920a43853cd5d7cff7aae8d2a03fd5e88f7a344437740e6efe22cf789cd9ca29e05328673f49527643a2c13dc0ceb250ef3
-
SSDEEP
3072:qQqD7K0a4sqPEd6WN4GITR+c7NIAhL2DsPcQsiM:3qXKz45q6WNBAl+kcQPM
Score
7/10
Malware Config
Signatures
-
pid Process 2494 ae156529ee59ea9218d3bbb7760d536e8becff7ff55659f9b723fcdfb1fa7726.elf 2494 ae156529ee59ea9218d3bbb7760d536e8becff7ff55659f9b723fcdfb1fa7726.elf 2494 ae156529ee59ea9218d3bbb7760d536e8becff7ff55659f9b723fcdfb1fa7726.elf 2495 ae156529ee59ea9218d3bbb7760d536e8becff7ff55659f9b723fcdfb1fa7726.elf 2495 ae156529ee59ea9218d3bbb7760d536e8becff7ff55659f9b723fcdfb1fa7726.elf -
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/httpd ae156529ee59ea9218d3bbb7760d536e8becff7ff55659f9b723fcdfb1fa7726.elf