12dc831553d0bd9f6f7b8eafba8bdd8f58fa6cf2b91cfbfcca41913766aa8403 | Triage

Analysis

max time kernel
130s
max time network
145s
platform
ubuntu-22.04_amd64
resource
ubuntu2204-amd64-20240611-en
resource tags

arch:amd64arch:i386image:ubuntu2204-amd64-20240611-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
submitted
28-12-2024 22:07

Sharing

Report Analysis Logs

General

Target

Aqua.x86_64.elf
Size

53KB
MD5

c4e72ea9a7d6723b1d02ad0cb4f978a0
SHA1

2b31bed25b0919972ded12997f1d49b9417ebe8a
SHA256

12dc831553d0bd9f6f7b8eafba8bdd8f58fa6cf2b91cfbfcca41913766aa8403
SHA512

7ba90083f435e65d597d77de4764dcdc9208f316a64ba4eb6b6b2230848e9aeb5ac8ee55dc6ef2733fe3c7f2d6cc19c14a574e2498f8e63588e57157fe17326b
SSDEEP

1536:KxKtFALhI11z7vFQu3l+6wGA6zvLAL6vopRzfcMr+Ri04f:XtI211neY+6rA6zy6MRzl+Ri04f

Score

7^/10

Malware Config

Signatures

Deletes itself 1 IoCs

pid	Process
1588	Aqua.x86_64.elf

Changes its process name 1 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	httpd	1587	Aqua.x86_64.elf

/tmp/Aqua.x86_64.elf
/tmp/Aqua.x86_64.elf
1⤵
- Deletes itself
- Changes its process name
PID:1587

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads