Analysis
- max time kernel
149s - max time network
151s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260126-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260126-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
11/05/2026, 20:38
Static task
static1
Behavioral task
behavioral1
Sample
176.65.139.94_sample.bin
Resource
ubuntu1804-amd64-20260126-en
3 signatures
150 seconds
General
- Target 176.65.139.94_sample.bin
- Size 49KB
- Sample260511-zesd4ady4j
- SHA256 e511a3dbfe2ff2d50c7b62916b1becb684fbb35bd3ff7e9e505ee4fd3690da02
- MD5 1f03defaab2475d949d52af9388317a4
- SHA1 ebf5e70366ea5c02457e94f49235daf0fc697340
- SHA512 c0a24531feed549060740d7f570b636dea01baeff9d5f4ac6e3b7fdffde37c57a4e91bcae4a061cdd9e2332c7dd2c96c17c49399eba9f3733df2bba89382126c
- SSDEEP 768:y4RJrbgdrXpCJ9t3C0q0GNls1qtgNod6k7a0iGxDopKXobK27ncKleTBn:Xrwa/t0XNlEqSCf7a05xMdO2TcEeTBn
- TLSH T124333A13258089FCC40982B147BFA62BF562F4BE4234F58D6BE87E26FD5AD310A5D4C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Deletes itself 1 IoCs
pid Process 1526 176.65.139.94_sample.bin - Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself /var/Sofia 1526 176.65.139.94_sample.bin - Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/176.65.139.94_sample.bin 176.65.139.94_sample.bin