Analysis
- max time kernel
146s - max time network
147s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260513-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
16/05/2026, 00:57
Static task
static1
Behavioral task
behavioral1
Sample
sys_users.elf
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
2 signatures
150 seconds
General
- Target sys_users.elf
- Size 762KB
- Sample260516-bbcbpscx6l
- SHA256 55df7c8cf2ef0cc5634812c88804edc782da2e4595acccf30c5b5d9945906861
- MD5 9c2b0546cec586ae3387d6fcf257e44e
- SHA1 0f22b7b597694abcb49821a300cbb0580d90ba2f
- SHA512 cc050ecf280580e7519f89b8b6c6c51b423075d24ef3c0c239beebf22a4676e55509ccc41c47fa9e4885fd4898739a752334862f52c101656036cace8f7945ea
- SSDEEP 6144:dyzekmat0ISZtaNzTbhejJiDMMBwUU4/aZLLaJI3DMKSkVTEscm1/W2eqWkJBLWj:mYZkoe/aZooDMNkpu25BWyWTiH
- TLSH T1B5F44A5AF2B3B0ACC553C030479BDBB2AD39B07902126D7B3191AA353952DE11F19FA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Enumerates running processes
Discovers information about currently running processes on the system
-
description ioc Process File opened for reading /proc/989/cmdline sys_users.elf File opened for reading /proc/1133/cmdline sys_users.elf File opened for reading /proc/588/cmdline sys_users.elf File opened for reading /proc/650/cmdline sys_users.elf File opened for reading /proc/914/cmdline sys_users.elf File opened for reading /proc/1/cmdline sys_users.elf File opened for reading /proc/35/cmdline sys_users.elf File opened for reading /proc/933/cmdline sys_users.elf File opened for reading /proc/1435/cmdline sys_users.elf File opened for reading /proc/8/cmdline sys_users.elf File opened for reading /proc/892/cmdline sys_users.elf File opened for reading /proc/21/cmdline sys_users.elf File opened for reading /proc/28/cmdline sys_users.elf File opened for reading /proc/29/cmdline sys_users.elf File opened for reading /proc/174/cmdline sys_users.elf File opened for reading /proc/667/cmdline sys_users.elf File opened for reading /proc/1054/cmdline sys_users.elf File opened for reading /proc/1293/cmdline sys_users.elf File opened for reading /proc/3/cmdline sys_users.elf File opened for reading /proc/170/cmdline sys_users.elf File opened for reading /proc/1033/cmdline sys_users.elf File opened for reading /proc/1075/cmdline sys_users.elf File opened for reading /proc/1080/cmdline sys_users.elf File opened for reading /proc/1229/cmdline sys_users.elf File opened for reading /proc/31/cmdline sys_users.elf File opened for reading /proc/693/cmdline sys_users.elf File opened for reading /proc/1012/cmdline sys_users.elf File opened for reading /proc/1037/cmdline sys_users.elf File opened for reading /proc/30/cmdline sys_users.elf File opened for reading /proc/853/cmdline sys_users.elf File opened for reading /proc/1083/cmdline sys_users.elf File opened for reading /proc/27/cmdline sys_users.elf File opened for reading /proc/172/cmdline sys_users.elf File opened for reading /proc/587/cmdline sys_users.elf File opened for reading /proc/976/cmdline sys_users.elf File opened for reading /proc/1024/cmdline sys_users.elf File opened for reading /proc/1176/cmdline sys_users.elf File opened for reading /proc/78/cmdline sys_users.elf File opened for reading /proc/167/cmdline sys_users.elf File opened for reading /proc/633/cmdline sys_users.elf File opened for reading /proc/446/cmdline sys_users.elf File opened for reading /proc/482/cmdline sys_users.elf File opened for reading /proc/1028/cmdline sys_users.elf File opened for reading /proc/10/cmdline sys_users.elf File opened for reading /proc/11/cmdline sys_users.elf File opened for reading /proc/16/cmdline sys_users.elf File opened for reading /proc/168/cmdline sys_users.elf File opened for reading /proc/254/cmdline sys_users.elf File opened for reading /proc/484/cmdline sys_users.elf File opened for reading /proc/939/cmdline sys_users.elf File opened for reading /proc/1466/cmdline sys_users.elf File opened for reading /proc/17/cmdline sys_users.elf File opened for reading /proc/176/cmdline sys_users.elf File opened for reading /proc/1465/cmdline sys_users.elf File opened for reading /proc/163/cmdline sys_users.elf File opened for reading /proc/459/cmdline sys_users.elf File opened for reading /proc/475/cmdline sys_users.elf File opened for reading /proc/478/cmdline sys_users.elf File opened for reading /proc/919/cmdline sys_users.elf File opened for reading /proc/1315/cmdline sys_users.elf File opened for reading /proc/12/cmdline sys_users.elf File opened for reading /proc/164/cmdline sys_users.elf File opened for reading /proc/520/cmdline sys_users.elf File opened for reading /proc/962/cmdline sys_users.elf