Analysis
- max time kernel
125s - max time network
142s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260513-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
30/09/2026, 01:11
Static task
static1
Behavioral task
behavioral1
Sample
x86_64.elf
Resource
ubuntu1804-amd64-20260513-en
2 signatures
150 seconds
General
- Target x86_64.elf
- Size 148KB
- Sample260930-bj4e6azzdx
- SHA256 57d5a50ba25adb9655277317c163a2afbb95077386ecba245ecc8925220bf99e
- MD5 e4478a13b8560943acf58b9aafbf9acf
- SHA1 c215dd71303818985d57883fc68a072dc10f3890
- SHA512 016af3578bfa554c66ab217e76adec935595fd1ab675169d998f8fd3012fff262d317fe61c2391452b141ca7559b87e31ab86ac913f384a7637334efe8159fd9
- SSDEEP 3072:UhsQRqV4oTkY1knmTvR1plYgEHPCib5uhSp6WJx:mXRiSWnYeK6WJ
- TLSH T17EE34C16B0C0C4FEC4EAC1744F9AF536DA72F4295134B25F27D9AB662E4EE211F2DA00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Unexpected DNS network traffic destination 1 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
description ioc Destination IP 81.169.136.222 - Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself /bin/bash 1480 x86_64.elf