Analysis
- max time kernel
147s - max time network
148s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20261019-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20261019-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
31/10/2026, 14:36
Static task
static1
Behavioral task
behavioral1
Sample
ux64.elf
Resource
ubuntu1804-amd64-20261019-en
4 signatures
150 seconds
General
- Target ux64.elf
- Size 136KB
- Sample261031-ryw8dsxxby
- SHA256 93341a7cd1c8996306f7ed452eeb7deffe97058f7354e1412427ef2ba27c8abb
- MD5 18d9eb6dfd11634c17a66071b4c343b8
- SHA1 4d0925dc775100138f6d7a5236ef061025135b75
- SHA512 c0dd6e29c450ae1d3cd188d16f505fd36f0841600750ec0ecb3276ac38344ec640f12a63426dcecbc7ac580423b3c069cf5406dbb692adb6fa52671352935f89
- SSDEEP 3072:09/SOyAEvjt6qkWcyR6sjafoH0FdBugQyDueMEPGVIva:09/SOyAEvjt6qkWcH18tQva
- TLSH T17BD34B07B5C180FDC4DAC1744B9BF53AED32B1A91238B26B27D4AE232E49E305F1DA54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Deletes itself 1 IoCs
pid Process 1520 ux64.elf - Traces itself 2 IoCs
Traces itself to prevent debugging attempts
pid Process 1520 ux64.elf 1521 ux64.elf - Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself httpd 1520 ux64.elf - Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/ux64.elf ux64.elf