Analysis
- max time kernel
147s - max time network
150s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260513-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
09/08/2026, 20:06
Behavioral task
behavioral1
Sample
x86.elf
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
3 signatures
150 seconds
General
- Target x86.elf
- Size 40KB
- Sample260809-yvmywaveqe
- SHA256 56c43ff49fda9a95111adbcc0076919244c7962ce22f5d2c41b18fb01fdf090f
- MD5 fcb76071e2caac82fb10589ac0675ffc
- SHA1 b2d0ec8f88a43d60d4d78a310aff9f1110c58abc
- SHA512 2cd17fe4cca2aadcaa7e1a8736b3a8b7c834b060f1a14abce09ec0fbf1dcb6183f6f96e7cb9eec882dfa49439bd46ba8447c5f60cb1988d5896ad76c189cc201
- SSDEEP 768:xMlB2zs8ssGfrRI6aQ2CEenzvq8uDOycN95VlVs:YYzs8ssGfrRI6aVCEe7WOrNrVla
- TLSH T16F1318C4F553D8F0EC5A06703076EB365F35F1FA222DE553D3A5DA72BC82602AA0699C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Enumerates running processes
Discovers information about currently running processes on the system
- Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself a 1507 x86.elf -
description ioc Process File opened for reading /proc/991/cmdline x86.elf File opened for reading /proc/158/cmdline x86.elf File opened for reading /proc/167/cmdline x86.elf File opened for reading /proc/177/cmdline x86.elf File opened for reading /proc/505/cmdline x86.elf File opened for reading /proc/670/cmdline x86.elf File opened for reading /proc/9/cmdline x86.elf File opened for reading /proc/168/cmdline x86.elf File opened for reading /proc/449/cmdline x86.elf File opened for reading /proc/470/cmdline x86.elf File opened for reading /proc/675/cmdline x86.elf File opened for reading /proc/728/cmdline x86.elf File opened for reading /proc/921/cmdline x86.elf File opened for reading /proc/1010/cmdline x86.elf File opened for reading /proc/468/cmdline x86.elf File opened for reading /proc/476/cmdline x86.elf File opened for reading /proc/986/cmdline x86.elf File opened for reading /proc/1068/cmdline x86.elf File opened for reading /proc/24/cmdline x86.elf File opened for reading /proc/166/cmdline x86.elf File opened for reading /proc/1085/cmdline x86.elf File opened for reading /proc/1251/cmdline x86.elf File opened for reading /proc/1335/cmdline x86.elf File opened for reading /proc/1396/cmdline x86.elf File opened for reading /proc/495/cmdline x86.elf File opened for reading /proc/1164/cmdline x86.elf File opened for reading /proc/159/cmdline x86.elf File opened for reading /proc/5/cmdline x86.elf File opened for reading /proc/98/cmdline x86.elf File opened for reading /proc/162/cmdline x86.elf File opened for reading /proc/202/cmdline x86.elf File opened for reading /proc/269/cmdline x86.elf File opened for reading /proc/487/cmdline x86.elf File opened for reading /proc/491/cmdline x86.elf File opened for reading /proc/497/cmdline x86.elf File opened for reading /proc/535/cmdline x86.elf File opened for reading /proc/996/cmdline x86.elf File opened for reading /proc/1067/cmdline x86.elf File opened for reading /proc/1504/cmdline x86.elf File opened for reading /proc/8/cmdline x86.elf File opened for reading /proc/11/cmdline x86.elf File opened for reading /proc/137/cmdline x86.elf File opened for reading /proc/172/cmdline x86.elf File opened for reading /proc/465/cmdline x86.elf File opened for reading /proc/514/cmdline x86.elf File opened for reading /proc/550/cmdline x86.elf File opened for reading /proc/962/cmdline x86.elf File opened for reading /proc/13/cmdline x86.elf File opened for reading /proc/14/cmdline x86.elf File opened for reading /proc/161/cmdline x86.elf File opened for reading /proc/492/cmdline x86.elf File opened for reading /proc/988/cmdline x86.elf File opened for reading /proc/1084/cmdline x86.elf File opened for reading /proc/1175/cmdline x86.elf File opened for reading /proc/6/cmdline x86.elf File opened for reading /proc/615/cmdline x86.elf File opened for reading /proc/919/cmdline x86.elf File opened for reading /proc/1141/cmdline x86.elf File opened for reading /proc/1352/cmdline x86.elf File opened for reading /proc/18/cmdline x86.elf File opened for reading /proc/171/cmdline x86.elf File opened for reading /proc/1071/cmdline x86.elf File opened for reading /proc/1500/cmdline x86.elf File opened for reading /proc/29/cmdline x86.elf