Analysis
- max time kernel
148s - max time network
149s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260513-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
20/07/2026, 22:00
Static task
static1
Behavioral task
behavioral1
Sample
4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
3 signatures
150 seconds
General
- Target 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf
- Size 127KB
- Sample260720-1ws8dsfv5q
- SHA256 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf
- MD5 6d0505e73a48526c0a913bb4cb5cf97d
- SHA1 cac245183f4dcf07048fe935b3fedf5bc455e89c
- SHA512 feaec507e79b0066ef70253a9fc90ccefe089cb542299ef1af021f2a5f2714ea30f475c81b93c5860140f78d24a124a9a3fdb6c7537f9ddc09d3845aae7343d6
- SSDEEP 3072:R+nYoOH0aA0TPrT1NHQSKkQ/d2SWjisIjCBQ:joOdP9XYpL
- TLSH T100D34B1B75C1D0FDC8D9C1B85BEBE526D972B4291138B21A27C8AE275E4EF205F2E610
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Enumerates running processes
Discovers information about currently running processes on the system
- Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself nigga 1507 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf -
description ioc Process File opened for reading /proc/1057/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/16/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/167/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/724/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/1040/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/10/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/166/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/168/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/497/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/1071/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/1473/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/1491/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/463/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/1166/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/83/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/84/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/163/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/173/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/257/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/486/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/1061/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/1306/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/3/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/495/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/689/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/961/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/1175/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/1206/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/1497/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/15/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/160/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/175/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/178/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/581/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/999/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/1012/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/1110/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/164/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/607/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/989/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/1112/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/1505/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/9/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/25/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/30/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/172/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/645/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/27/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/12/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/21/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/23/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/507/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/1271/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/18/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/81/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/481/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/533/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/1093/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/1503/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/4/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/496/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/1026/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/1079/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf File opened for reading /proc/1083/comm 4db3b8c50c29eabf6363b0040f53703bb02a74868ded9a807a283e688dd79fcf