Analysis
- user interaction
yes - max time kernel
0s - max time network
303s - platform
ubuntu-24.04_amd64 - resource
ubuntu2404-amd64-20260126-en - resource tags
arch:amd64arch:i386image:ubuntu2404-amd64-20260126-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system - submitted
10/07/2026, 18:06
Static task
static1
Behavioral task
behavioral1
Sample
CMCLIENT-Linux-1.5.9.appimage
Resource
ubuntu2404-amd64-20260126-en
2 signatures
300 seconds
General
- Target CMCLIENT-Linux-1.5.9.appimage
- Size 100.9MB
- Sample260710-wp4ckaes3p
- SHA256 f150213e9f1eeb6eafeb0cc50ba6c73666e61f1f16c518ec698120ee989363b1
- MD5 aa4f02dab2c1fc352e163f5c63231ba9
- SHA1 04be160cb956f8047674487161ac7116dffd86b7
- SHA512 2ba9f87d594bbab941499b3ef73b48199fcc682f436291a0f71e29954fbf2b55d25367fc9f82145da718b16d0d18b57afd57c37bac3361db53599a6312a15a74
- SSDEEP 3145728:bOSdBvIN52QNDGu4vNTzvhmKzKOwiLJd/+xTa:bFdBQT2QN0vtvhm+H1dATa
- TLSH T11C3833F656B2D38ED16BD4787482CBE6F1A26023213584333B4453725FD3768C7E8A9A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Contacts third-party web service commonly abused for C2 1 TTPs 4 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 261 discord.com 263 discord.com 259 discord.com 260 discord.com -
description ioc Process File opened for reading /proc/self/exe CMCLIENT-Linux-1.5.9.appimage