Analysis
- max time kernel
0s - max time network
139s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260513-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
04/08/2026, 02:40
Behavioral task
behavioral1
Sample
i686.elf
Resource
ubuntu1804-amd64-20260513-en
2 signatures
150 seconds
General
- Target i686.elf
- Size 53KB
- Sample260804-c6b5vs1akf
- SHA256 363600aafcb52184b61cbedea14e287a644c1352596a403e0bc1c087a9d2a3c6
- MD5 5c849c19c647d3739dc5c89c4f559c10
- SHA1 f4f8398f45d5eb4f4dddf41e6b7b0671529e500a
- SHA512 aaae2270a5b5c516f66ad3e97a7784ac0bc968c8bd4a6e3fd3844db3a5f4b29a091a3c5d9488ee8e1db8721a2aab5766adb52fabb4153fc785e38952e648eb49
- SSDEEP 768:EOsaaJQnMHvea9WJTBhq4ZpqN0+TAnFCLGF/qpMDOwaHowEaOCt9YuVLnG5dBICs:EOfadHH9WVqrN0+ZLULhrmf5nmdB9g
- TLSH T1D9334C82F647C5F5C85309716477A77A8B31D92A8021D3A7EB58AD33ED2BD0253273AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Deletes itself 1 IoCs
pid Process 1496 i686.elf - Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself [kworker/u4:0] 1496 i686.elf