f6b6b4dee7ed6a67f176b1d48434985630a10a9f4769c4da0a71c04960d05b36

Analysis

max time kernel
137s
max time network
150s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20250619-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20250619-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
08/05/2026, 16:11

Target
x86_64.elf
Size 136KB
Sample260508-tm3bdaax2z
SHA256 f6b6b4dee7ed6a67f176b1d48434985630a10a9f4769c4da0a71c04960d05b36
MD5 3013f0498acec847442e682208104456
SHA1 6cded5f6de40b95a4241f58beb1680d84a7215b8
SHA512 f2e9eb7a92bd6e24a1a97f10eaf872ca7601d76e0a104dae8fd0396093b8545d91ffbcef6ddcf0e04a898ce05d0b25a513b21989e9bab5187616e69a8300d7f9
SSDEEP 3072:NWm/NUKdukxTP6beXeSo7g5v18gQ1rcdzrCvFysc8wbZnv:NWm/NUKdukxTP6bCeSoqFewdzGo8wRv
TLSH
T13DD35C567AC188FDC049D13417AEE036E8A1F0FC1378B59B6BD0AE325C4DD615A3DEA2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

discovery

Contacts a large (24670) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046

Changes its process name 1 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	sleep 1	1527	x86_64.elf

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact