Overview

overview

10

Static

static

10

Aqua.x86.elf

ubuntu-24.04-amd64

7

Analysis

  • max time kernel
    138s
  • max time network
    150s
  • platform
    ubuntu-24.04_amd64
  • resource
    ubuntu2404-amd64-20240523-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
  • submitted
    15-01-2025 13:42

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Aqua.x86.elf

  • Size

    82KB

  • MD5

    86b5f68f4f26facbeb106e83f614f68c

  • SHA1

    c817443cd6d466308ac2b4170eb084bc00a4c4b4

  • SHA256

    cbd93dbc3fb2310c327fbc4e2b37f0ea79761bfba8c78c490c7c75be5c1c6f03

  • SHA512

    7ad1656f4ea17a092683081e790c1961f06947cc3a3548abb913ab2a2799e3cfab8a853a56668acab6ed325abe06038a533e2f08a2cc5d00214685c72cfed1fd

  • SSDEEP

    1536:cl5COCHldmAgVSY8Qu+gwUmAjjvECZBxFD4Smncmq:Y5COCXXYBEfrnxZlmcx

Score
7/10
rootkit

Malware Config

Signatures

  • Loads a kernel module 5 IoCs

    Loads a Linux kernel module, potentially to achieve persistence

    rootkit
  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/Aqua.x86.elf
    /tmp/Aqua.x86.elf
    1⤵
    • Loads a kernel module
    • Writes file to tmp directory
    PID:2485

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads