Analysis
-
max time kernel
149s -
max time network
147s -
platform
ubuntu-22.04_amd64 -
resource
ubuntu2204-amd64-20250307-en -
resource tags
arch:amd64arch:i386image:ubuntu2204-amd64-20250307-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system -
submitted
08/04/2025, 08:02
Behavioral task
behavioral1
Sample
debug.dbg.elf
Resource
ubuntu2204-amd64-20250307-en
ubuntu-22.04-amd64
3 signatures
150 seconds
General
-
Target
debug.dbg.elf
-
Size
106KB
-
MD5
6bd4e11336a2be577d63e085f57fb18d
-
SHA1
0957ac293a33b3de42e3da4629127804b19e4011
-
SHA256
e90a483543f1e086886f1a8d79cfc322a5ac83004b1b20671de4f8d00e32eff9
-
SHA512
d7b914f9f1380e8610796e3b91361b7220bf03fea00506f9db70cc1bd5914bb82bf743ee28410527b4311444de0b25ad6f9b66396363f8644bc0ebf702eda55e
-
SSDEEP
3072:O1iOep8X1g0INOlVOkqDjb9MmjH0USy7/L2ank:O1iOep8X1g0uOlVF4t5UmT2an
Score
6/10
Malware Config
Signatures
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Changes its process name 1 IoCs
description pid Changes the process name, possibly in an attempt to hide itself 1556 -
description ioc File opened for reading /proc/90/cmdline File opened for reading /proc/739/cmdline File opened for reading /proc/889/cmdline File opened for reading /proc/1577/cmdline File opened for reading /proc/218/cmdline File opened for reading /proc/895/cmdline File opened for reading /proc/923/cmdline File opened for reading /proc/1140/cmdline File opened for reading /proc/1576/cmdline File opened for reading /proc/92/cmdline File opened for reading /proc/606/cmdline File opened for reading /proc/1162/cmdline File opened for reading /proc/1354/cmdline File opened for reading /proc/24/cmdline File opened for reading /proc/408/cmdline File opened for reading /proc/1041/cmdline File opened for reading /proc/1055/cmdline File opened for reading /proc/1071/cmdline File opened for reading /proc/1103/cmdline File opened for reading /proc/1153/cmdline File opened for reading /proc/1583/cmdline File opened for reading /proc/5/cmdline File opened for reading /proc/83/cmdline File opened for reading /proc/212/cmdline File opened for reading /proc/213/cmdline File opened for reading /proc/588/cmdline File opened for reading /proc/910/cmdline File opened for reading /proc/1190/cmdline File opened for reading /proc/1273/cmdline File opened for reading /proc/16/cmdline File opened for reading /proc/527/cmdline File opened for reading /proc/1051/cmdline File opened for reading /proc/23/cmdline File opened for reading /proc/112/cmdline File opened for reading /proc/599/cmdline File opened for reading /proc/1161/cmdline File opened for reading /proc/75/cmdline File opened for reading /proc/77/cmdline File opened for reading /proc/221/cmdline File opened for reading /proc/225/cmdline File opened for reading /proc/404/cmdline File opened for reading /proc/589/cmdline File opened for reading /proc/1367/cmdline File opened for reading /proc/97/cmdline File opened for reading /proc/425/cmdline File opened for reading /proc/1108/cmdline File opened for reading /proc/1171/cmdline File opened for reading /proc/1173/cmdline File opened for reading /proc/1309/cmdline File opened for reading /proc/1578/cmdline File opened for reading /proc/96/cmdline File opened for reading /proc/209/cmdline File opened for reading /proc/307/cmdline File opened for reading /proc/308/cmdline File opened for reading /proc/525/cmdline File opened for reading /proc/1222/cmdline File opened for reading /proc/1563/cmdline File opened for reading /proc/27/cmdline File opened for reading /proc/503/cmdline File opened for reading /proc/1142/cmdline File opened for reading /proc/1172/cmdline File opened for reading /proc/1240/cmdline File opened for reading /proc/1297/cmdline File opened for reading /proc/1332/cmdline