Analysis
- max time kernel
1s - max time network
136s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20251211-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20251211-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
13/12/2025, 23:32
Static task
static1
Behavioral task
behavioral1
Sample
zerx86.elf
Resource
ubuntu1804-amd64-20251211-en
2 signatures
150 seconds
General
- Target zerx86.elf
- Size 45KB
- Sample251213-3jf4eaymgp
- SHA256 5d9c6a814622a0d1336dd4d05c9fcbc4b366799bb83bf2c5e9c0a5a98f9e721f
- MD5 1cc6c821fc1e1b8aca1167e60deb7fae
- SHA1 b80524584e5b8d62782089112086f5c71ade159c
- SHA512 8c7a5f716ef961c5b921785baf515eaf46bfe288dab9c14597d6e80baf8010927b9109730001b3a943e4038260fa54be2bee5a096b7b42404719c1bfac4a8b52
- SSDEEP 768:OaoA3whCogK6ba1TfxVOLQHTWgEcXzV4Nnv6BTn6QcOH/SsT8ARovC:poA3whlgBba1Ti0CgrXzV4Nyt9c4/Tr9
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Renames itself 1 IoCs
pid Process 1513 zerx86.elf - Changes its process name 1 IoCs
description pid Process Changes the process name, possibly in an attempt to hide itself 1513 zerx86.elf