Analysis
-
max time kernel
144s -
max time network
148s -
platform
ubuntu-22.04_amd64 -
resource
ubuntu2204-amd64-20240611-en -
resource tags
arch:amd64arch:i386image:ubuntu2204-amd64-20240611-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system -
submitted
10-01-2025 18:53
Behavioral task
behavioral1
Sample
fqkjei686.elf
Resource
ubuntu2204-amd64-20240611-en
ubuntu-22.04-amd64
2 signatures
150 seconds
General
-
Target
fqkjei686.elf
-
Size
102KB
-
MD5
8e257e9bdd58ca21dab862e30b704e80
-
SHA1
37b84b465ac45f72e6a5b885f64a0d44556ba7f7
-
SHA256
66778b88710ef39bf7adc25fc48b0ca0888132b9f98f73733db118b4c176a1ed
-
SHA512
3abaebc310681bfaf3cbfca135c10299c0551a78b1c6cc92933f476365862cd62bda6218cd13ddd06c463b6c852648916ff03b3615d7cdfd9ca80ae267e15a23
-
SSDEEP
1536:4OksIQgcI/XpZkb/C2x0eE7ycaVNm6LBbWoiQDEOOeQmDpX3kIbu7K5:hgQgn/Mb3x0eE7yXVrsjQD/Oe3m7K
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid Process 1593 fqkjei686.elf -
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself httpd 1592 fqkjei686.elf