Analysis
- max time kernel
130s - max time network
128s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20240729-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240729-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
05/03/2025, 22:42
Behavioral task
behavioral1
Sample
bejv86.elf
Resource
ubuntu1804-amd64-20240729-en
2 signatures
150 seconds
General
- Target bejv86.elf
- Size 102KB
- Sample250305-2mr5easjs7
- SHA256 ca858d47f348e68a8ef7f562e6942a14822e4d014e131b103f10ad3dd87adc2c
- MD5 cb6cbec917fc2ebcf2ac8c6fda57235d
- SHA1 c7e4c19b8930d1ddb43d3ba9e36259abf8bc1e16
- SHA512 035c899aa33b1eee55038ce75f05dd62888b3edcdcf311977b8cc70cd81426c606e243798a49c35e9346a6d5b2fa92e25af632bceb7f7c60117eea62f1e4f59d
- SSDEEP 3072:20+z7UIRZs33Krvqozl13m0A6DdJvMr5C8:l+z7d7snKrvqozl0mtQ5D
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Deletes itself 1 IoCs
pid 1504 - Changes its process name 1 IoCs
description ioc pid Changes the process name, possibly in an attempt to hide itself httpd 1503