Extracted

• • Target

    fuck.elf

  • Size

    611KB

  • MD5

    ee5edcc4d824db63a8c8264a8631f067

  • SHA1

    ce483e6b254cc3ed3ede2e1fee3f959cc4eddbe8

  • SHA256

    b84cf164fde12dd07192aa44f1b943044610539fd979e0f9359d44062f21a612

  • SHA512

    4a3b98bbea252e8980fc4133eb026a6c673313c6b92a6fc865481c79321cdf24446f651973efbf01fe06794d397d076accedf99b07da0c08d32d3fa4e382bc54

  • SSDEEP

    12288:UB1tATMVAqnf+ExxBHYpmA38X8LYkCW6Ti4x6yB1/iGK4UlUuTh1AG:UB1BVpmExDYp38X8LYTWh4fNiGQl/91h

  Score

  9^/10

  persistence

  • Writes file to system bin folder

  • Creates/modifies Cron job

    Cron allows running tasks on a schedule, and is commonly used for malware persistence.

    persistence

  • Modifies rc script

    Adding/modifying system rc scripts is a common persistence mechanism.

    persistence

  • Write file to user bin folder

  • Reads runtime system information

    Reads data from /proc virtual filesystem.

  • Writes file to tmp directory

    Malware often drops required files in the /tmp directory.

  behavioral1