d2eb57a740a285202cb4224d7453334fd5c0b3d170288575a5eb91fb191bd5b3 | Triage

Analysis

max time kernel
130s
max time network
142s
platform
ubuntu-22.04_amd64
resource
ubuntu2204-amd64-20240522.1-en
resource tags

arch:amd64arch:i386image:ubuntu2204-amd64-20240522.1-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
submitted
29-12-2024 01:57

Sharing

Report Analysis Logs

General

Target

Aqua.i686.elf
Size

49KB
MD5

e9eccfb9834ec789ab345b0e6e62e16a
SHA1

5ddc158f3bf417469945cc18c97259b67a9f1c08
SHA256

d2eb57a740a285202cb4224d7453334fd5c0b3d170288575a5eb91fb191bd5b3
SHA512

9263ccddf423780a1d61cd458dc5e60ae4de6e714c28de12c19f600473125fdcfc10ca5956d3f0555af20c3aaa7317c85b1045284166c3bd653fd08b99b19db8
SSDEEP

1536:j7WsI7YXIRWH+MK+77eVDzJxrRWsw3wgGbnPwC7FQEDc:j7W37Y4RAK+77eVDzXwdAgGLPbRHD

Score

7^/10

Malware Config

Signatures

Deletes itself 1 IoCs

pid	Process
1570	Aqua.i686.elf

Changes its process name 1 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	httpd	1569	Aqua.i686.elf

/tmp/Aqua.i686.elf
/tmp/Aqua.i686.elf
1⤵
- Deletes itself
- Changes its process name
PID:1569

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads