b303756919f73d36c6caa7926ed6e212c1040ca7406ec5c461632f714771021b | Triage

Analysis

max time kernel
134s
max time network
141s
platform
ubuntu-22.04_amd64
resource
ubuntu2204-amd64-20240522.1-en
resource tags

arch:amd64arch:i386image:ubuntu2204-amd64-20240522.1-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
submitted
19-12-2024 07:05

Sharing

Report Analysis Logs

General

Target

Aqua.i686.elf
Size

102KB
MD5

5d14cf8d9e6696a9ef42ce5b251a2a1f
SHA1

6739c14048b64da4fdc445312207f21ccb05e060
SHA256

b303756919f73d36c6caa7926ed6e212c1040ca7406ec5c461632f714771021b
SHA512

83a7473ccc0ec33211299dbddf6e4d43373e66b4c6be6b1d51f978242085f16de13d66af2c10e42b46aa313f6c25a2f1ee50cbb45996078f5e9dec3b718344e5
SSDEEP

3072:40fcV8u11TUV5aUEMH6mH8KRZwJUCF7lWF:40fcV8u11TsaUECaW

Score

7^/10

Malware Config

Signatures

Deletes itself 1 IoCs

pid	Process
1559	Aqua.i686.elf

Changes its process name 1 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	httpd	1558	Aqua.i686.elf

/tmp/Aqua.i686.elf
/tmp/Aqua.i686.elf
1⤵
- Deletes itself
- Changes its process name
PID:1558

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads