4fed40eef5420fbf0166856b39a3ce04f13095403771a74e2dd4a9c49ddf66c4 | Triage

Analysis

max time kernel
142s
max time network
143s
platform
ubuntu-22.04_amd64
resource
ubuntu2204-amd64-20240611-en
resource tags

arch:amd64arch:i386image:ubuntu2204-amd64-20240611-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
submitted
25-12-2024 16:32

Sharing

Report Analysis Logs

General

Target

Aqua.x86_64.elf
Size

53KB
MD5

02a7198319504cd90b77687396d31e63
SHA1

af67be9137071bb0d25e0f20dd34f65a7c43e57a
SHA256

4fed40eef5420fbf0166856b39a3ce04f13095403771a74e2dd4a9c49ddf66c4
SHA512

861ca6025b24a153f3b3d8fc6489eb2420f9b984ffdc4366018fbf3050a8ea2cc10ea31a742611339633546c512a16458435ec914b45c62c94b2932a12267cb3
SSDEEP

1536:KxKtFALhI11z7vFQu3l+6wGAQ1LT+xnPIWRzfcMr+xmGy:XtI211neY+6rAQ1anjRzl+xmGy

Score

7^/10

Malware Config

Signatures

Deletes itself 1 IoCs

pid	Process
1571	Aqua.x86_64.elf

Changes its process name 1 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	httpd	1570	Aqua.x86_64.elf

/tmp/Aqua.x86_64.elf
/tmp/Aqua.x86_64.elf
1⤵
- Deletes itself
- Changes its process name
PID:1570

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads