1205d35b4ba501885610598b03cfd82c9e829836273293635595c118aedbff9e

Analysis

max time kernel
9s
max time network
129s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20260513-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
29/09/2026, 12:34

Target
manji.x86
Size 73KB
Sample260929-prrm8a1wex
SHA256 1205d35b4ba501885610598b03cfd82c9e829836273293635595c118aedbff9e
MD5 a78feee06639027a4584489e88a4c5d0
SHA1 2d684e7edb9aef37167211b6f74792163ba05316
SHA512 e65cfef127b8f15bf584a0860a4228937be9c53acb736840f07626f8b3bafcd3cfbb3718d39d98616cb20de101f939893c65375a0292a99b484a119e1d61de41
SSDEEP 1536:RcK8MffyU5RL+r9RS3TlUEf/wNBOgkVgu3Urpbr5ag1416mEv6+8H:RcHCfyU5MuTlUEnwdYgu3Spbr4q4HDH
TLSH
T116730981BA43DEF3E81711F502B7DB365A32FD3A083AC5C6E364FCA16A515C1A5163AC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Traces itself 1 IoCs

Traces itself to prevent debugging attempts

pid	Process
1510	manji.x86

Changes its process name 2 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	uhttpd	1510	manji.x86
Changes the process name, possibly in an attempt to hide itself	sshd	1510	manji.x86

Reads runtime system information 2 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/mounts	manji.x86
File opened for reading	/proc/self/status	manji.x86