Analysis
- max time kernel
30s - max time network
153s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260126-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260126-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
16/04/2026, 12:18
Behavioral task
behavioral1
Sample
px86
Resource
ubuntu1804-amd64-20260126-en
3 signatures
150 seconds
General
- Target px86
- Size 127KB
- Sample260416-pgq9psew5j
- SHA256 903a903d79cf00593cafd4245266e15d26984979cc154e3b287746260cc768b2
- MD5 875c59a45927fc3b52444e79e0d66ace
- SHA1 b9c491d8b6b9ad43ec3a977a0042888698296fa3
- SHA512 7093899d8440d081497655d07b1de6869c99cd539ab20c59f4181f8e855ea2e82d3c225d2a07bd761b5e4d6314849702287974181febb6291c27b0051fb3191f
- SSDEEP 3072:q3FRS6VzrAvknIt4AQ2KoXE9wRYJQ60jxeozJ47/p1XwbZnlwL:q3F1ovknE4ASCEiuW4jplwRq
- TLSH T1D4D32886AB43DEF3D80315F112B79B226A32FC3E1836DA91E378BCA1D9555C1960637C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Deletes itself 1 IoCs
pid Process 1521 px86 - Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself /var/Sofia 1521 px86 - Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/px86 px86