Overview

overview

10

Static

static

10

97a546c7d0...cc.elf

ubuntu-18.04-amd64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    97a546c7d08ad34dfab74c9c8a96986c54768c592a8dae521ddcf612a84fb8cc.elf

  • Size

    28KB

  • Sample

    221115-qcmw6ahh2s

  • MD5

    5fda35bd30be1cc21f8e933e41a88d9b

  • SHA1

    8535c3b18a10649b94531c6d9f79750324498e5c

  • SHA256

    97a546c7d08ad34dfab74c9c8a96986c54768c592a8dae521ddcf612a84fb8cc

  • SHA512

    1a0f9a5a5a6d3cdf1b5d71dda8f111e8f6b6d4378d3e1fe4c7797bcea3642fced6dd7ec398b8fbe0a108a4d63d00191ff80893eeeeaebb7b637fb17e41220ec6

  • SSDEEP

    384:kmdtqD0ogKS6afykzoSPAB5f0IbMCfZS3Fz8WdGnzv0iFXkTg3YUq8wz0H:kYtqD0ousSPSHbDRS3aWdgv0iFOUq8HH

Score
10/10
bpfdoorlinux

Malware Config

Targets

    • Target

      97a546c7d08ad34dfab74c9c8a96986c54768c592a8dae521ddcf612a84fb8cc.elf

    • Size

      28KB

    • MD5

      5fda35bd30be1cc21f8e933e41a88d9b

    • SHA1

      8535c3b18a10649b94531c6d9f79750324498e5c

    • SHA256

      97a546c7d08ad34dfab74c9c8a96986c54768c592a8dae521ddcf612a84fb8cc

    • SHA512

      1a0f9a5a5a6d3cdf1b5d71dda8f111e8f6b6d4378d3e1fe4c7797bcea3642fced6dd7ec398b8fbe0a108a4d63d00191ff80893eeeeaebb7b637fb17e41220ec6

    • SSDEEP

      384:kmdtqD0ogKS6afykzoSPAB5f0IbMCfZS3Fz8WdGnzv0iFXkTg3YUq8wz0H:kYtqD0ousSPSHbDRS3aWdgv0iFOUq8HH

    Score
    7/10

    • Writes file to shm directory

      Malware can drop malicious files in the shm directory which will run directly from RAM.

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

    • Writes file to tmp directory

      Malware often drops required files in the /tmp directory.

    behavioral1

MITRE ATT&CK Matrix

Tasks