General
- Target wife.i686.elf
- Size 155KB
- Sample260530-bdjtkacw4v
- SHA256 b1992872509f5048e57e72d2b50223105b0eab9db5358dccac6a83a2f3ddb45c
- MD5 8c903133c328a5c39dcb2f589d32d549
- SHA1 d3f867f4841f2413b4ef5b799dad901777695874
- SHA512 da555be3bd7b4e21fbe766001c49fe13711141b61c86d3ff3bc93748d988b06756d41a1bcd6335e88562663025c1101c353a9c1b0e0c884405e35d53df8c969f
- SSDEEP 3072:FohH0V3JL6BTMTeZRf7tzJVhD7AhstnDx:FI0n6OyTUutnDx
- TLSH T139F32B51FF83CAF3E40304F080EAAB3F5A30ED1A4436C559EB657E6AD6539D5E20A364
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
wife.i686.elf
Resource
ubuntu1804-amd64-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target wife.i686.elf
- Size 155KB
- SHA256 b1992872509f5048e57e72d2b50223105b0eab9db5358dccac6a83a2f3ddb45c
- MD5 8c903133c328a5c39dcb2f589d32d549
- SHA1 d3f867f4841f2413b4ef5b799dad901777695874
- SHA512 da555be3bd7b4e21fbe766001c49fe13711141b61c86d3ff3bc93748d988b06756d41a1bcd6335e88562663025c1101c353a9c1b0e0c884405e35d53df8c969f
- SSDEEP 3072:FohH0V3JL6BTMTeZRf7tzJVhD7AhstnDx:FI0n6OyTUutnDx
- TLSH T139F32B51FF83CAF3E40304F080EAAB3F5A30ED1A4436C559EB657E6AD6539D5E20A364
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads process memory
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.