Analysis
- max time kernel
0s - max time network
129s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260513-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
26/08/2026, 21:07
General
- Target daredevil.x86_64.elf
- Size 52KB
- Sample260826-zycsrawfne
- SHA256 aa8bd21cf150a64c844b159682907936cf6364fa833be4c6f610b0a811aca45b
- MD5 aacd9b65492b0e18694321e245083190
- SHA1 5013fffcb61285fb6540680b1615d310e16a42f9
- SHA512 976c10461da619f2aa809536f06f558940f879ea237106ea51f4ac462c6f76d3ee364cca1cb9c2c902172af09cb624f036a55e02d31fb28105dcc58a50a9d74c
- SSDEEP 1536:bIVzK8VU+AauDRZYQ40qDIaVgVn0/d87jkvM1:bIk8VU+Nu1zkIaVga187jZ
- TLSH T1DC33F2631762D3F2E97126B327515BA862DAF064A285EB3E0D3060BF07797477E7050B
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Traces itself 1 IoCs
Traces itself to prevent debugging attempts
pid Process 1508 daredevil.x86_64.elf - Checks hardware identifiers (DMI) 1 TTPs 1 IoCs
Checks DMI information which indicate if the system is a virtual machine.
description ioc Process File opened for reading /sys/class/dmi/id/product_name daredevil.x86_64.elf -
description ioc Process File opened for reading /proc/uptime daredevil.x86_64.elf