Overview

overview

9

Static

static

bk.x86-202...37.elf

ubuntu-18.04-amd64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bk.x86-20221002-1437.elf

  • Size

    28KB

  • Sample

    221002-rzpvpscdfr

  • MD5

    8adb7f8a3c38e1849db2cbbc9b2c559f

  • SHA1

    e63cb8ec3fd3957afb525e3bba77130f32440cdf

  • SHA256

    a87f6a6a0199d2e6cb6689d11ab986c2afc15859863e507bb159035eaef85e40

  • SHA512

    e23f45cea8a582b9b25156f4f9f17b95e4f484e154c1222b659ab24886f466e314db5d11cab75faa02e7381b0637e4ae81dcc84190b2fdc87942bf807e0fa389

  • SSDEEP

    768:dTS4W7sOa4M3qrwUBHV0/mSZE5CkPSnynbcuyD7URQRjg:ILol4M3hwEmSZE5Fqnynouy8Ry8

Score
9/10
discoverylinux

Malware Config

Targets

    • Target

      bk.x86-20221002-1437.elf

    • Size

      28KB

    • MD5

      8adb7f8a3c38e1849db2cbbc9b2c559f

    • SHA1

      e63cb8ec3fd3957afb525e3bba77130f32440cdf

    • SHA256

      a87f6a6a0199d2e6cb6689d11ab986c2afc15859863e507bb159035eaef85e40

    • SHA512

      e23f45cea8a582b9b25156f4f9f17b95e4f484e154c1222b659ab24886f466e314db5d11cab75faa02e7381b0637e4ae81dcc84190b2fdc87942bf807e0fa389

    • SSDEEP

      768:dTS4W7sOa4M3qrwUBHV0/mSZE5CkPSnynbcuyD7URQRjg:ILol4M3hwEmSZE5Fqnynouy8Ry8

    Score
    9/10
    discovery

    • Contacts a large (46710) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Writes file to tmp directory

      Malware often drops required files in the /tmp directory.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks