Analysis
- user interaction
yes - max time kernel
1s - max time network
12s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260513-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
12/08/2026, 20:42
Static task
static1
Behavioral task
behavioral1
Sample
oneclient_app_2.2.2_x86_64.appimage
Resource
ubuntu1804-amd64-20260513-en
1 signatures
150 seconds
General
- Target oneclient_app_2.2.2_x86_64.appimage
- Size 24.3MB
- Sample260812-zhdecavaqa
- SHA256 73d19d0960cd7bbba5c5fd2192ecfbf00cd8bc71ba125c25beb23969f1fa844c
- MD5 ea0700c14602b0026f5a7eae197bb544
- SHA1 0e06fbd4a403cd5f44b8bdab43f4cc4bcebe3e30
- SHA512 d0810506054de6576babe7d652c031e7e219a8a119dbc5ebec45685af3314df21877eedfdabb5c200e124052be54bb1a032cd746d78a54578acc99b65e29e8f1
- SSDEEP 786432:rIurSlnCSFHwKOAQARLn8DuoA3EMEP0No0Gh6:rIurEnCKwqd8fAdScW
- TLSH T131473307F9E3547CD199C9314347E576AB3274961213A63B7AC8A7B02F2BE30978CB52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
-
description ioc Process File opened for reading /proc/sys/vm/overcommit_memory oneclient_app_2.2.2_x86_64.appimage File opened for reading /proc/self/exe oneclient_app_2.2.2_x86_64.appimage
Processes
-
/tmp/oneclient_app_2.2.2_x86_64.appimage/tmp/oneclient_app_2.2.2_x86_64.appimage1⤵
- Reads runtime system information
PID:1471 -
/bin/fusermount/bin/fusermount --version2⤵PID:1479
-
-
/tmp/.mount_onecliDjjpEP/AppRun/tmp/oneclient_app_2.2.2_x86_64.appimage1⤵PID:1471
-
/tmp/.mount_onecliDjjpEP/usr/bin/oneclient_apponeclient_app1⤵PID:1471