Analysis
-
max time kernel
131s -
max time network
142s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240611-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240611-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
29-12-2024 00:27
Behavioral task
behavioral1
Sample
Aqua.x86.elf
Resource
ubuntu1804-amd64-20240611-en
ubuntu-18.04-amd64
2 signatures
150 seconds
General
-
Target
Aqua.x86.elf
-
Size
45KB
-
MD5
8c8a51b27ea23aa5cc9d84340fb811c3
-
SHA1
443b414fcac9cb3d885b3a75e2454b99a830813d
-
SHA256
21dd63d9202d05f660678f69d8863b891a4399e42cfdd3402f9fb8d204ac3466
-
SHA512
f6bf936b669b3f6a3f2b1a0c6bef67ae332035f9db89e0af1b5e11fa4c40c452c892c49b3a6826e41dd5dfa20793688ef1c5dcecc427ca7a8c766d3537ffb7d1
-
SSDEEP
768:vb+4+2li4CLuSVhjnpgMcg9InW7XcxZ9H5mDBXit31h7OmxH9XbAj85XS2qgIs:vb+R2lVCSSVhjCC9z7XVBXAF9xHpbAYR
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid Process 1500 Aqua.x86.elf -
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself httpd 1499 Aqua.x86.elf