Analysis
-
max time kernel
134s -
max time network
147s -
platform
ubuntu-24.04_amd64 -
resource
ubuntu2404-amd64-20240523-en -
resource tags
arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system -
submitted
10-01-2025 18:47
Behavioral task
behavioral1
Sample
jefne64.elf
Resource
ubuntu2404-amd64-20240523-en
ubuntu-24.04-amd64
2 signatures
150 seconds
General
-
Target
jefne64.elf
-
Size
152KB
-
MD5
5dd9937cb8a3892d388f6b79369fa2bc
-
SHA1
36f27da84b9c2cc1bfd7990a928d8fe3d03c653f
-
SHA256
684933d923e088f8540f80518e1e39fc9fe57fc7dd45c9869c8115b8ad9c9c5b
-
SHA512
de43ff1629ebb955be8d0392b321a2107dce21e4d10f4115eb3bea44f341cea00bc44b48f1f96ac899ba453b0812f6ed2b5d42419abd858e87d9e18c16faf167
-
SSDEEP
3072:EG0Bt1Kznkv9u04zb/i2E7boBOHn0pW89slt9s6xdPgIzIaK6O1C:EG071Kznkv9u8TVwulAfsI/6
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid Process 2767 jefne64.elf -
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself httpd 2766 jefne64.elf