General
- Target x86.elf
- Size 155KB
- Sample260909-rm37kacd98
- SHA256 43292b1afa0c4d13ce8d39c83ee946695995fbb153b5a801675d4d32b1a6290d
- MD5 2f560d08db55718bdf27ea3310900d30
- SHA1 3c73fe5a6bd08ebfc32bfd66df765d77496a7c7f
- SHA512 1c92b7a5154db1e75f3e77435eee77ab3f7c5a195322b7f4deb1cf79352ce434768fa385464f1c4b2f576df4b0f0db2969a3a43723e1d6be2d4f4c7e50690b9a
- SSDEEP 3072:79gyPA+a9mf1tRaBqZxv3i7XE4FcBGsR:7JPA+a94lZ34UYcBR
- TLSH T133F34B83BF83DAF7E55300F141F79B221A31ED3A0422DA5AD7B47DB5A8516D0E60A36C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
x86.elf
Resource
ubuntu1804-amd64-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target x86.elf
- Size 155KB
- SHA256 43292b1afa0c4d13ce8d39c83ee946695995fbb153b5a801675d4d32b1a6290d
- MD5 2f560d08db55718bdf27ea3310900d30
- SHA1 3c73fe5a6bd08ebfc32bfd66df765d77496a7c7f
- SHA512 1c92b7a5154db1e75f3e77435eee77ab3f7c5a195322b7f4deb1cf79352ce434768fa385464f1c4b2f576df4b0f0db2969a3a43723e1d6be2d4f4c7e50690b9a
- SSDEEP 3072:79gyPA+a9mf1tRaBqZxv3i7XE4FcBGsR:7JPA+a94lZ34UYcBR
- TLSH T133F34B83BF83DAF7E55300F141F79B221A31ED3A0422DA5AD7B47DB5A8516D0E60A36C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads process memory
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.