Analysis
-
max time kernel
147s -
max time network
148s -
platform
ubuntu-22.04_amd64 -
resource
ubuntu2204-amd64-20240611-en -
resource tags
arch:amd64arch:i386image:ubuntu2204-amd64-20240611-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system -
submitted
27-12-2024 01:26
Behavioral task
behavioral1
Sample
df35a88ae415b194914dea1e7e7d8978468858a24e88471b1587e7fff9925344.elf
Resource
ubuntu2204-amd64-20240611-en
ubuntu-22.04-amd64
2 signatures
150 seconds
General
-
Target
df35a88ae415b194914dea1e7e7d8978468858a24e88471b1587e7fff9925344.elf
-
Size
57KB
-
MD5
7e891c97b21f2dfbd8185c6b4c67e62a
-
SHA1
6955f6d5f11b408aa192a7cec59df872d09f6d1a
-
SHA256
df35a88ae415b194914dea1e7e7d8978468858a24e88471b1587e7fff9925344
-
SHA512
4fb78add0dbadb67249fd380c775e4f8e353c5c461ef792b47df592de2fa57449aaa6c5bac839438befb4b7e84fe5a3e5ef459bb103143a5a34ace52d2242a00
-
SSDEEP
1536:K4wD2cRvuJvf7f0PLvjU+kPv1wAjYNttzd40vf35OfR1:pwD2cRvuJvzf0PLLM31wAjyty0vBOfR1
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid Process 1573 df35a88ae415b194914dea1e7e7d8978468858a24e88471b1587e7fff9925344.elf -
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself httpd 1573 df35a88ae415b194914dea1e7e7d8978468858a24e88471b1587e7fff9925344.elf