25b4ad32baf67f774b4bd76a2c72ac0f19f60ffa4d6fabb754582c0a132186a5 | Triage

Analysis

max time kernel
132s
max time network
147s
platform
ubuntu-22.04_amd64
resource
ubuntu2204-amd64-20240729-en
resource tags

arch:amd64arch:i386image:ubuntu2204-amd64-20240729-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
submitted
15-01-2025 13:42

Sharing

Report Analysis Logs

General

Target

Aqua.x86_64.elf
Size

135KB
MD5

a162103c457faa7f8155925630d28aa8
SHA1

8424691d503207c5b2354955802378b9bfa1c8af
SHA256

25b4ad32baf67f774b4bd76a2c72ac0f19f60ffa4d6fabb754582c0a132186a5
SHA512

10daa1c7d4393724c3bfa21148a5e79fecd90dfa23f1bd550194352315363a9b2d9c469ce002f9220e4377f04ab3a81a0afc8a9810dd266bf66d52305aa918e7
SSDEEP

3072:Z7TB1eY0uLkK2fo+4U04vxLWcj62pzncSd7OnZQtwDOhl:Z7TB1eYBkK9ehzcSCOtwDOhl

Score

7^/10

Malware Config

Signatures

Deletes itself 1 IoCs

pid	Process
1570	Aqua.x86_64.elf

Changes its process name 1 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	httpd	1569	Aqua.x86_64.elf

/tmp/Aqua.x86_64.elf
/tmp/Aqua.x86_64.elf
1⤵
- Deletes itself
- Changes its process name
PID:1569

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads