General
- Target x86.elf
- Size 61KB
- Sample260623-wkyxaaez9w
- SHA256 87831e9485c62f85543f8945e4813ca9d390d8b899c8ceebe9c60d128af99b15
- MD5 2b9885f010b2152231b760c7bc21ab87
- SHA1 032165a7a73b4f4305b16eb9f6f688353d143d3b
- SHA512 ff1a70f85f4dc7c71fc74a20e1667d588526995f549127a6572ee58df030e2343c222776861e3bea76cacc79286de3c8d51b8d9e7ccdfcb8c6cd977353f6c064
- SSDEEP 1536:Ha6X68oA7FsLDUJVhZIbTa3HSdduvVkvSBGSFc:6fzAhYD8+Ta3QudOUdc
- TLSH T133536CC6AA43E0F5EC6705B5003BB7468F76E43A5538DB96C7A63936DC22B009B1735C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
x86.elf
Resource
ubuntu1804-amd64-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target x86.elf
- Size 61KB
- SHA256 87831e9485c62f85543f8945e4813ca9d390d8b899c8ceebe9c60d128af99b15
- MD5 2b9885f010b2152231b760c7bc21ab87
- SHA1 032165a7a73b4f4305b16eb9f6f688353d143d3b
- SHA512 ff1a70f85f4dc7c71fc74a20e1667d588526995f549127a6572ee58df030e2343c222776861e3bea76cacc79286de3c8d51b8d9e7ccdfcb8c6cd977353f6c064
- SSDEEP 1536:Ha6X68oA7FsLDUJVhZIbTa3HSdduvVkvSBGSFc:6fzAhYD8+Ta3QudOUdc
- TLSH T133536CC6AA43E0F5EC6705B5003BB7468F76E43A5538DB96C7A63936DC22B009B1735C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Reads process memory
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.