1d038e59da667da0f5ae85e5a2f57b876bba6501123c0ef57bd130946754d3f8 | Triage

Analysis

max time kernel
8223s
max time network
152s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20221111-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20221111-enkernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
14-02-2023 22:23

Sharing

Report Analysis Logs

General

Target

08f46b69cf3619cca5e5933abf97186a.elf
Size

52KB
MD5

08f46b69cf3619cca5e5933abf97186a
SHA1

b1e483716cb08cd1a754f2cc0225a6c47a212df0
SHA256

1d038e59da667da0f5ae85e5a2f57b876bba6501123c0ef57bd130946754d3f8
SHA512

ac3e95e08e2bd7675fd159a519f75e151ddda031580a3968d0baec52c10d5cbb09fcb02c2713c50539214854d33dccff1f7ab2865a6849c43e5ebfc12c999466
SSDEEP

1536:3ESIuYNrHXGtK5duFaEfUy31A9nfB2qrk:3ESIuYNrHXG04FK9fkSk

Score

5^/10

Malware Config

Signatures

Reads runtime system information 2 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
/proc/filesystems	/proc/filesystems	mkdir
/proc/filesystems	/proc/filesystems	mv

/tmp/08f46b69cf3619cca5e5933abf97186a.elf
/tmp/08f46b69cf3619cca5e5933abf97186a.elf
1⤵
PID:581

/bin/sh
sh -c "mkdir /dgj8w5ub11/ && >/dgj8w5ub11/dgj8w5ub11 && cd /dgj8w5ub11/ >/dev/null"
1⤵
PID:584
- /bin/mkdir
  mkdir /dgj8w5ub11/
  2⤵
  - Reads runtime system information
  PID:585

/bin/sh
sh -c "mv /tmp/08f46b69cf3619cca5e5933abf97186a.elf /dgj8w5ub11/dgj8w5ub11 && chmod 777 /dgj8w5ub11/dgj8w5ub11 >/dev/null"
1⤵
PID:586
- /bin/mv
  mv /tmp/08f46b69cf3619cca5e5933abf97186a.elf /dgj8w5ub11/dgj8w5ub11
  2⤵
  - Reads runtime system information
  PID:587
- /bin/chmod
  chmod 777 /dgj8w5ub11/dgj8w5ub11
  2⤵
  PID:588

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads