Overview

overview

10

Static

static

10

Aqua.x86.elf

ubuntu-24.04-amd64

7

Analysis

  • max time kernel
    130s
  • max time network
    143s
  • platform
    ubuntu-24.04_amd64
  • resource
    ubuntu2404-amd64-20240523-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
  • submitted
    29-12-2024 15:20

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Aqua.x86.elf

  • Size

    61KB

  • MD5

    915ce9f9442ae0184ce34437bd8e611c

  • SHA1

    0ffc260e86706684de14ab075bc0b4f4b71e23a9

  • SHA256

    c4294ee54021f0ffae62208fd9614f73e20e6ee13a8cd48c211180ffd0f3fbcc

  • SHA512

    e9f7bbc2393063dceb7295cd24ed3e1a514bbb342137f9d172fab4e4ce3d1ad72a69af1a5892130553a0a3d894e52940308c3e88a2ed10d4bab0b4c51915622c

  • SSDEEP

    1536:MOf6FP7mQT9+CgAf92NJcJjtEUznSzdvPcifVd7c/4CSQ3:ff6BaQT9+EMc1tdzS9Pfn7q

Score
7/10
rootkit

Malware Config

Signatures

  • Loads a kernel module 1 IoCs

    Loads a Linux kernel module, potentially to achieve persistence

    rootkit
  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/Aqua.x86.elf
    /tmp/Aqua.x86.elf
    1⤵
    • Loads a kernel module
    • Writes file to tmp directory
    PID:2499

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads