Analysis
-
max time kernel
142s -
max time network
146s -
platform
ubuntu-24.04_amd64 -
resource
ubuntu2404-amd64-20240523-en -
resource tags
arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system -
submitted
26-12-2024 02:27
Behavioral task
behavioral1
Sample
df35a88ae415b194914dea1e7e7d8978468858a24e88471b1587e7fff9925344.elf
Resource
ubuntu2404-amd64-20240523-en
ubuntu-24.04-amd64
2 signatures
150 seconds
General
-
Target
df35a88ae415b194914dea1e7e7d8978468858a24e88471b1587e7fff9925344.elf
-
Size
57KB
-
MD5
7e891c97b21f2dfbd8185c6b4c67e62a
-
SHA1
6955f6d5f11b408aa192a7cec59df872d09f6d1a
-
SHA256
df35a88ae415b194914dea1e7e7d8978468858a24e88471b1587e7fff9925344
-
SHA512
4fb78add0dbadb67249fd380c775e4f8e353c5c461ef792b47df592de2fa57449aaa6c5bac839438befb4b7e84fe5a3e5ef459bb103143a5a34ace52d2242a00
-
SSDEEP
1536:K4wD2cRvuJvf7f0PLvjU+kPv1wAjYNttzd40vf35OfR1:pwD2cRvuJvzf0PLLM31wAjyty0vBOfR1
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid Process 2826 df35a88ae415b194914dea1e7e7d8978468858a24e88471b1587e7fff9925344.elf -
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself httpd 2826 df35a88ae415b194914dea1e7e7d8978468858a24e88471b1587e7fff9925344.elf