Analysis
- max time kernel
142s - max time network
144s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260513-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
04/08/2026, 14:12
Behavioral task
behavioral1
Sample
miron.x86_64.elf
Resource
ubuntu1804-amd64-20260513-en
4 signatures
150 seconds
General
- Target miron.x86_64.elf
- Size 46KB
- Sample260804-rh4brsca76
- SHA256 43f18b1026da73060d9af4797352c8273ecb6cc71da9190398cfe443c11d1ab8
- MD5 980aeb2b58d42ff0a0e29e25bd2a1a86
- SHA1 065ad047c563af2e9b6cad8b2c2890a25365c468
- SHA512 cb939fc0c9e4aa70bc181a2a0822eb9dba127fed3823bf27927929c562cb70713b5c82f9eb4fd3a00736e95475f11d406fb8aca03dd311ed5633ec89141f7f8d
- SSDEEP 768:VYlUviLIa7ezdBSe2cRWBsnCOwxeX/ZEYT6Rhx2h2KZiD0Con7mtvR9RiOsXJ+Ph:cyiZ7ezrSe5U2nC3UFT6Rhxi2MG0MvRJ
- TLSH T1B423F16CC7F47271D20EA17CBC5BAE464231220AC77AD927CCD1F6D913A78588D57C16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Deletes itself 1 IoCs
pid Process 1468 miron.x86_64.elf - Traces itself 2 IoCs
Traces itself to prevent debugging attempts
pid Process 1468 miron.x86_64.elf 1470 miron.x86_64.elf - Changes its process name 1 IoCs
description pid Process Changes the process name, possibly in an attempt to hide itself 1468 miron.x86_64.elf - Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/miron.x86_64.elf miron.x86_64.elf