Analysis
- max time kernel
0s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260513-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
04/08/2026, 12:21
Behavioral task
behavioral1
Sample
dbg
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
2 signatures
150 seconds
Errors
Reason
Reading agent response: unexpected EOF
General
- Target dbg
- Size 76KB
- Sample260804-pjj86sem6w
- SHA256 036f5b0ccd595315d4c10fca45bca7fcbb786d93b01c42d5b979bc5d45c02d46
- MD5 0dc6423df0fa01f34aa767414e4d4a43
- SHA1 8a6a785dd6687feb64cd160181428c1dc6194456
- SHA512 f3261d58ca9e464e9bee5c3683c27016cdbb6edf832e6b9ee8b226fe360493c67954d8a465495a2ceeda63b978b33b639d9761c97f260f8b3035ef6421fee30b
- SSDEEP 1536:BZOvkXi/jUFITQwd8VJ5m2vxesldiWeK1VPy3sERu:JXiLUFhwCz5FeslIk1VPuXE
- TLSH T11B737C17E59090FDC899E2755BAE6232D933B03D1231B22E23C4ED627E6DE212F6D750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Enumerates running processes
Discovers information about currently running processes on the system
-
description ioc Process File opened for reading /proc/2/stat dbg File opened for reading /proc/14/stat dbg File opened for reading /proc/20/stat dbg File opened for reading /proc/79/stat dbg File opened for reading /proc/137/cmdline dbg File opened for reading /proc/13/stat dbg File opened for reading /proc/30/stat dbg File opened for reading /proc/80/stat dbg File opened for reading /proc/157/stat dbg File opened for reading /proc/202/cmdline dbg File opened for reading /proc/3/cmdline dbg File opened for reading /proc/10/cmdline dbg File opened for reading /proc/13/cmdline dbg File opened for reading /proc/35/cmdline dbg File opened for reading /proc/164/stat dbg File opened for reading /proc/167/cmdline dbg File opened for reading /proc/28/stat dbg File opened for reading /proc/249/stat dbg File opened for reading /proc/4/cmdline dbg File opened for reading /proc/26/cmdline dbg File opened for reading /proc/159/cmdline dbg File opened for reading /proc/29/cmdline dbg File opened for reading /proc/165/cmdline dbg File opened for reading /proc/167/stat dbg File opened for reading /proc/28/cmdline dbg File opened for reading /proc/160/stat dbg File opened for reading /proc/174/stat dbg File opened for reading /proc/83/cmdline dbg File opened for reading /proc/326/stat dbg File opened for reading /proc/12/stat dbg File opened for reading /proc/79/cmdline dbg File opened for reading /proc/164/cmdline dbg File opened for reading /proc/15/stat dbg File opened for reading /proc/32/cmdline dbg File opened for reading /proc/78/stat dbg File opened for reading /proc/176/cmdline dbg File opened for reading /proc/19/cmdline dbg File opened for reading /proc/21/stat dbg File opened for reading /proc/27/stat dbg File opened for reading /proc/86/stat dbg File opened for reading /proc/161/cmdline dbg File opened for reading /proc/17/cmdline dbg File opened for reading /proc/32/stat dbg File opened for reading /proc/78/cmdline dbg File opened for reading /proc/89/cmdline dbg File opened for reading /proc/162/cmdline dbg File opened for reading /proc/12/cmdline dbg File opened for reading /proc/18/cmdline dbg File opened for reading /proc/25/stat dbg File opened for reading /proc/34/stat dbg File opened for reading /proc/171/cmdline dbg File opened for reading /proc/172/cmdline dbg File opened for reading /proc/24/stat dbg File opened for reading /proc/36/cmdline dbg File opened for reading /proc/82/stat dbg File opened for reading /proc/98/cmdline dbg File opened for reading /proc/163/stat dbg File opened for reading /proc/7/cmdline dbg File opened for reading /proc/11/cmdline dbg File opened for reading /proc/21/cmdline dbg File opened for reading /proc/159/stat dbg File opened for reading /proc/3/stat dbg File opened for reading /proc/6/cmdline dbg File opened for reading /proc/7/stat dbg