Analysis
-
max time kernel
0s -
max time network
155s -
platform
linux_amd64 -
resource
ubuntu1804-amd64-en-20211208 -
resource tags
-
submitted
22-11-2022 21:35
General
-
Target
028c57222fee0d0ecdff4efb171a0380.elf
-
Size
27KB
-
MD5
028c57222fee0d0ecdff4efb171a0380
-
SHA1
6a86e2f43f3f0e12a46152d06ef37ebfbf0e2fca
-
SHA256
6c3538b35436c3a8965e77b32f1183e5b1dd7274c0b35645f7cd432f8b4695e4
-
SHA512
2971a2771687ee195cf415fdb5cda634f3a418e84598d6106617faf81754774f0c9d629af0b155fa5376573c5eda90c18faa33346338de0ad119c6ca16813db0
-
SSDEEP
768:ULMB752cU1jSCK0yPj59Qcssx3XMhSCnbcuyD7URQRja:UIfUhSl0kb1saXMMCnouy8Rym
Score
9/10
Malware Config
Signatures
-
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/028c57222fee0d0ecdff4efb171a0380.elf/tmp/028c57222fee0d0ecdff4efb171a0380.elf1⤵
- Writes file to tmp directory