bf5ea570bf4d18e60dd758a2461fbdf73a500dbd179e458aca81d65b5d9155e1

Resubmissions

24-11-2022 16:12

221124-tnh9wshh31 10

03-11-2022 10:02

221103-l21r4ahab9 8

11-09-2022 15:34

220911-szq87sbhd4 8

Analysis

max time kernel
0s
max time network
103s
platform
linux_amd64
resource
ubuntu1804-amd64-en-20211208
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
11-09-2022 15:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

update.elf
Size

81KB
MD5

8457f71c6a5fe83bb513d1dfba99271a
SHA1

7316b5cc2aac0390890f6819d90b7cd36359ca62
SHA256

bf5ea570bf4d18e60dd758a2461fbdf73a500dbd179e458aca81d65b5d9155e1
SHA512

cfc592d68021c94cfce42ccafed3c645c8e7804956c3a2b4797a3d6a9b6ddfe2494731ededa7dd6304059c8715363def52f93b51d2787c36aa069694818507fb
SSDEEP

1536:mihlrshQNuVhNnUinhhWbCh+Kh0MqHekyN/1H5xuM8gya:mXhFlUinhhWbCh+ohq+xN/1Zx2gy

Score

8^/10

Malware Config

Signatures

Writes DNS configuration 1 TTPs 1 IoCs

Writes data to DNS resolver config file.

Dynamic Resolution

T1568

description	ioc
/etc/resolv.conf	/etc/resolv.conf

/tmp/update.elf
/tmp/update.elf
1⤵
PID:581

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Dynamic Resolution

T1568

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads