Analysis
- max time kernel
149s - max time network
152s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260513-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
03/10/2026, 16:57
Behavioral task
behavioral1
Sample
debug.dbg.elf
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
3 signatures
150 seconds
General
- Target debug.dbg.elf
- Size 68KB
- Sample261003-vgnfpsvsfx
- SHA256 c80d054ad4b8cde7e3663f8ad889005f811088a8ecd6c8db90abaf4cbf8fcc05
- MD5 9b69c4525616bc68d78648631cc74f0a
- SHA1 cb99606290a38e8556c817e88ae93a5828682c01
- SHA512 a7f237a9a020e5c4e4218c9a8969addacf01e87fe5b6481f0b3d340d3cdf783e6ecc174c83e1602e55484389df6628933a17623353dba06b665b90b3621a55dd
- SSDEEP 1536:nWrvuvqqrUACiJHqiCNdn8dh23iSC3RG5sFy5pVURSVIUVHv:nwvuv1rUACiJHqXd8dE3iSoG5M+VUy
- TLSH T131636AC4E743D5F4ED134A702037F73A9A71E47A0125DB66C764EA32EC63A52A61B38C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Enumerates running processes
Discovers information about currently running processes on the system
- Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself a 1481 debug.dbg.elf -
description ioc Process File opened for reading /proc/15/cmdline debug.dbg.elf File opened for reading /proc/645/cmdline debug.dbg.elf File opened for reading /proc/1036/cmdline debug.dbg.elf File opened for reading /proc/1049/cmdline debug.dbg.elf File opened for reading /proc/1099/cmdline debug.dbg.elf File opened for reading /proc/1/cmdline debug.dbg.elf File opened for reading /proc/14/cmdline debug.dbg.elf File opened for reading /proc/448/cmdline debug.dbg.elf File opened for reading /proc/474/cmdline debug.dbg.elf File opened for reading /proc/1016/cmdline debug.dbg.elf File opened for reading /proc/1028/cmdline debug.dbg.elf File opened for reading /proc/26/cmdline debug.dbg.elf File opened for reading /proc/162/cmdline debug.dbg.elf File opened for reading /proc/1069/cmdline debug.dbg.elf File opened for reading /proc/11/cmdline debug.dbg.elf File opened for reading /proc/78/cmdline debug.dbg.elf File opened for reading /proc/659/cmdline debug.dbg.elf File opened for reading /proc/910/cmdline debug.dbg.elf File opened for reading /proc/987/cmdline debug.dbg.elf File opened for reading /proc/4/cmdline debug.dbg.elf File opened for reading /proc/10/cmdline debug.dbg.elf File opened for reading /proc/476/cmdline debug.dbg.elf File opened for reading /proc/585/cmdline debug.dbg.elf File opened for reading /proc/972/cmdline debug.dbg.elf File opened for reading /proc/1479/cmdline debug.dbg.elf File opened for reading /proc/32/cmdline debug.dbg.elf File opened for reading /proc/165/cmdline debug.dbg.elf File opened for reading /proc/259/cmdline debug.dbg.elf File opened for reading /proc/478/cmdline debug.dbg.elf File opened for reading /proc/83/cmdline debug.dbg.elf File opened for reading /proc/84/cmdline debug.dbg.elf File opened for reading /proc/436/cmdline debug.dbg.elf File opened for reading /proc/929/cmdline debug.dbg.elf File opened for reading /proc/1085/cmdline debug.dbg.elf File opened for reading /proc/172/cmdline debug.dbg.elf File opened for reading /proc/459/cmdline debug.dbg.elf File opened for reading /proc/469/cmdline debug.dbg.elf File opened for reading /proc/1449/cmdline debug.dbg.elf File opened for reading /proc/24/cmdline debug.dbg.elf File opened for reading /proc/9/cmdline debug.dbg.elf File opened for reading /proc/1190/cmdline debug.dbg.elf File opened for reading /proc/1290/cmdline debug.dbg.elf File opened for reading /proc/22/cmdline debug.dbg.elf File opened for reading /proc/81/cmdline debug.dbg.elf File opened for reading /proc/606/cmdline debug.dbg.elf File opened for reading /proc/661/cmdline debug.dbg.elf File opened for reading /proc/967/cmdline debug.dbg.elf File opened for reading /proc/1092/cmdline debug.dbg.elf File opened for reading /proc/1093/cmdline debug.dbg.elf File opened for reading /proc/1153/cmdline debug.dbg.elf File opened for reading /proc/161/cmdline debug.dbg.elf File opened for reading /proc/479/cmdline debug.dbg.elf File opened for reading /proc/508/cmdline debug.dbg.elf File opened for reading /proc/672/cmdline debug.dbg.elf File opened for reading /proc/1336/cmdline debug.dbg.elf File opened for reading /proc/1346/cmdline debug.dbg.elf File opened for reading /proc/1478/cmdline debug.dbg.elf File opened for reading /proc/174/cmdline debug.dbg.elf File opened for reading /proc/1000/cmdline debug.dbg.elf File opened for reading /proc/1059/cmdline debug.dbg.elf File opened for reading /proc/3/cmdline debug.dbg.elf File opened for reading /proc/163/cmdline debug.dbg.elf File opened for reading /proc/435/cmdline debug.dbg.elf File opened for reading /proc/720/cmdline debug.dbg.elf