Analysis
- max time kernel
149s - max time network
151s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260513-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
03/07/2026, 01:54
Static task
static1
Behavioral task
behavioral1
Sample
x86_64.ghost.elf
Resource
ubuntu1804-amd64-20260513-en
0 signatures
150 seconds
General
- Target x86_64.ghost.elf
- Size 103KB
- Sample260703-cbpsgaey6j
- SHA256 876de7e7e43dbfacb7e37487d926eac189ddf717966e09fc439b986a20719b54
- MD5 e2e9c80fbc26a5fecb938565c91c7726
- SHA1 421f5a31b53c70188eaaf4603c1661d0461d28ef
- SHA512 b28ea75f37004b8f6a08101ac0ac5b8c2c5a816733b962519a43c1bcea5816bedb6c1487fa1005bc3914a914b5360120c257f1e6a315a64ed8d6881087476aba
- SSDEEP 1536:WmZwg5l0gs0sqSdV080/zEi90M1gAbfvLYKlorF8AaCML:WmZtQgniHOE20zAbyF+L
- TLSH T1D3A32A17AE91C0BEC08AD2745BDBD2B2F732F8A51221361F3354AA223FB1F951B18755
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
/tmp/x86_64.ghost.elf/tmp/x86_64.ghost.elf1⤵PID:1480
-
/bin/shsh -c "uname -m"2⤵PID:1490
-
/bin/unameuname -m3⤵PID:1491
-
-
-
/bin/shsh -c "cat /etc/os-release 2>/dev/null | grep -E '^ID=' | cut -d= -f2 | tr -d '\"'"2⤵PID:1492
-
/usr/bin/cutcut "-d=" -f23⤵PID:1495
-
-
/usr/bin/trtr -d "\""3⤵PID:1496
-
-
/bin/catcat /etc/os-release3⤵PID:1493
-
-
/bin/grepgrep -E "^ID="3⤵PID:1494
-
-