Analysis

  • max time kernel
    1s
  • max time network
    129s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20260513-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    17/05/2026, 16:49

General

  • Target
    dlr.x86_64.elf
  • Size 878KB
  • Sample260517-vbza1se16n
  • SHA256 f634e202e41b5a2cd09477a5dae63f889b69be2d5e6f81d75e7d68957b6ee395
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 8 IoCs
  • System Network Configuration Discovery 1 TTPs 2 IoCs

    Adversaries may gather information about the network configuration of a system.

  • Writes file to tmp directory 8 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/dlr.x86_64.elf
    /tmp/dlr.x86_64.elf
    1⤵
    • Executes dropped EXE
    • Writes file to tmp directory
    PID:1496
    • /tmp/x86
      x86 apexbot
      2⤵
        PID:1497
      • /tmp/mips
        mips apexbot
        2⤵
        • System Network Configuration Discovery
        PID:1503
      • /tmp/mipsel
        mipsel apexbot
        2⤵
        • System Network Configuration Discovery
        PID:1505
      • /tmp/armv7l
        armv7l apexbot
        2⤵
          PID:1507
        • /tmp/armv6l
          armv6l apexbot
          2⤵
            PID:1509
          • /tmp/armv5l
            armv5l apexbot
            2⤵
              PID:1511
            • /tmp/i686
              i686 apexbot
              2⤵
                PID:1513
              • /tmp/ppc64
                ppc64 apexbot
                2⤵
                  PID:1515

              Network

                    MITRE ATT&CK Enterprise v16

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads