bf5ea570bf4d18e60dd758a2461fbdf73a500dbd179e458aca81d65b5d9155e1 | Triage

Resubmissions

24-11-2022 16:12

221124-tnh9wshh31 10

03-11-2022 10:02

221103-l21r4ahab9 8

11-09-2022 15:34

220911-szq87sbhd4 8

Analysis

max time kernel
0s
max time network
103s
platform
linux_amd64
resource
ubuntu1804-amd64-en-20211208
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
11-09-2022 15:34

Sharing

Report Analysis Logs

General

Target

update.elf
Size

81KB
MD5

8457f71c6a5fe83bb513d1dfba99271a
SHA1

7316b5cc2aac0390890f6819d90b7cd36359ca62
SHA256

bf5ea570bf4d18e60dd758a2461fbdf73a500dbd179e458aca81d65b5d9155e1
SHA512

cfc592d68021c94cfce42ccafed3c645c8e7804956c3a2b4797a3d6a9b6ddfe2494731ededa7dd6304059c8715363def52f93b51d2787c36aa069694818507fb
SSDEEP

1536:mihlrshQNuVhNnUinhhWbCh+Kh0MqHekyN/1H5xuM8gya:mXhFlUinhhWbCh+ohq+xN/1Zx2gy

Score

8^/10

Malware Config

Signatures

Writes DNS configuration 1 TTPs 1 IoCs
Writes data to DNS resolver config file.

Dynamic Resolution
T1568

Processes:

description ioc

/etc/resolv.conf /etc/resolv.conf

/tmp/update.elf
/tmp/update.elf
1⤵
PID:581

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Dynamic Resolution

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads