Analysis
- max time kernel
0s - max time network
138s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260513-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
27/05/2026, 16:19
Static task
static1
Behavioral task
behavioral1
Sample
_efded22b2ba90d1ead2c5314532c0f6f0a9f80dc0c2e07efc9c4277184e6a020.elf
Resource
ubuntu1804-amd64-20260513-en
2 signatures
150 seconds
General
- Target _efded22b2ba90d1ead2c5314532c0f6f0a9f80dc0c2e07efc9c4277184e6a020.elf
- Size 118KB
- Sample260527-tssdcses2t
- SHA256 efded22b2ba90d1ead2c5314532c0f6f0a9f80dc0c2e07efc9c4277184e6a020
- MD5 8f40b87cb65735213c352ce34c0556f0
- SHA1 56e52d11faf3d12d5597f85ad79357844287f7ac
- SHA512 aff4643f45fe900173def225e85e3a92c0c407c8246dfe9e19e1e127b3ce5d4ef55a4476a7830558a589f280475ae432f9f8e62b87df228ed1b9017d532a8647
- SSDEEP 1536:EpaVasNSgRmQRRbQoUl4FD4qi/7N/kmI3jyVSuMrKeSCBgp:EYaGvsB8o/XI32cucfu
- TLSH T165C30982FB43DAB3E44315F111FBAB255A31FC3E0C36D946E3647CF2A9216C19616368
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Deletes itself 1 IoCs
pid Process 1493 _efded22b2ba90d1ead2c5314532c0f6f0a9f80dc0c2e07efc9c4277184e6a020.elf - Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself dropbear 1493 _efded22b2ba90d1ead2c5314532c0f6f0a9f80dc0c2e07efc9c4277184e6a020.elf
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /run/.dropbear.lock
- Size 5B
- SHA256 7dece897a0fe55691ff1d0ace49dcbf3a09fa4194595b5bd02f123dc9fa67473
- MD5 2ae6c2cddc993540ef9a062a4fc52109
- SHA1 8b4dc8c63d2326711a551c5fed0864dd41ebc42e
- SHA512 975161c83b634c1cc900863e65d7d7aa8ac11dda84178c70aaeaecb497adb75c4fcd656aeaa0859845051cef7e4a3040b230c50cdc42d08531179cd5d99cb746
- MD5 SHA1 SHA512