50daadd49b8df4f0190d0badfde89f8e6a6e61af664ef1444984028a005f40d8

Analysis

max time kernel
96s
max time network
129s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20260513-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
13/09/2026, 11:38

Target
2026-09-13_a9fcb1ee7af015a5a7858e9615525600_helldown_winnti
Size 811KB
Sample260913-nrzhdsaf27
SHA256 50daadd49b8df4f0190d0badfde89f8e6a6e61af664ef1444984028a005f40d8
MD5 a9fcb1ee7af015a5a7858e9615525600
SHA1 389a33348c7eada1b43da1ea852bcaa7e37b89c1
SHA512 e94ea8ee33b70e1232ee35d11741df24fe56d7f63dab8b0a218c09610554a4a122a70456856346c47e83fd540bfbded1669875135d58b179d21897199174842c
SSDEEP 24576:tSsieOk9yEJSyRRrl15S2BUjUzryjszRmKbBJF:MleOk9yEJDla0UwzryqF
TLSH
T1CE05D837A2A142ECE08BF17829CFF1E2E894B4F012D6706F67DB99167E159D10F4D2A1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Writes file to tmp directory 1 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/lock_ax	2026-09-13_a9fcb1ee7af015a5a7858e9615525600_helldown_winnti

/tmp/2026-09-13_a9fcb1ee7af015a5a7858e9615525600_helldown_winnti
/tmp/2026-09-13_a9fcb1ee7af015a5a7858e9615525600_helldown_winnti
1⤵
- Writes file to tmp directory
PID:1516