Analysis
- user interaction
yes - max time kernel
0s - max time network
926s - platform
ubuntu-24.04_amd64 - resource
ubuntu2404-amd64-20260126-en - resource tags
- submitted
01/08/2026, 10:31
General
- Target gog_com-Inscryption_1.desktop
- Size 297B
- Sample260801-mkrnjasfpg
- SHA256 44a3c5c6475bf2acf2accf42e45e4e6260d4194423aa400ffab62871fb479a69
Score
6/10
Malware Config
Signatures
- Contacts third-party web service commonly abused for C2 1 TTPs 11 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Changes its process name 1 IoCs
- Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/usr/bin/gtk-launchgtk-launch gog_com-Inscryption_1.desktop1⤵
- Changes its process name
- Reads runtime system information