Analysis
-
max time kernel
0s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20221111-en -
resource tags
-
submitted
17-03-2023 11:26
General
-
Target
x86.elf
-
Size
120KB
-
MD5
bc8a4da3d15a1c5a31eba01bb609d67c
-
SHA1
ba29e8a02a439ec4d3af5fafebaeaec68ea75b54
-
SHA256
acef6f73e8edd482ddc6fd032489dddbcd026ab6ff8b02ce4b6b922caa868664
-
SHA512
1a43038b56d79d34ac0e900d7d980914d9d9579e4cc5923c747299b91be1946cfb95eb69af16c436006fc70537ee7a1691ba976f2ace6bb38b8290e087188622
-
SSDEEP
3072:62Rfd0wrSAewzi+Xn+8Uhw6W+aPLJmDk1c8xF6KjW:6IZfO8IBeJmDk1c8xF6KjW
Score
9/10
Malware Config
Signatures
-
Writes file to system bin folder 1 TTPs 64 IoCs
-
Creates/modifies Cron job 1 TTPs 64 IoCs
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Reads runtime system information 64 IoCs
Reads data from /proc virtual filesystem.
-
Writes file to tmp directory 64 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/x86.elf/tmp/x86.elf1⤵
-
/tmp/fileydgYSu/tmp/x86.elf2⤵
- Writes file to system bin folder
- Creates/modifies Cron job
- Reads runtime system information
-
/tmp/fileM3tlFV/tmp/x86.elf3⤵
- Writes file to system bin folder
- Reads runtime system information
-
/tmp/filezNXypv/tmp/x86.elf4⤵
- Writes file to system bin folder
- Creates/modifies Cron job
-
/tmp/filewV9yR9/tmp/x86.elf5⤵
- Creates/modifies Cron job
-
/tmp/fileVTeT2O/tmp/x86.elf6⤵
- Writes file to system bin folder
- Creates/modifies Cron job
-
/tmp/fileMGudEs/tmp/x86.elf7⤵
- Writes file to system bin folder
- Creates/modifies Cron job
- Reads runtime system information
-
/tmp/fileyhpKm9/tmp/x86.elf8⤵
- Writes file to system bin folder
- Creates/modifies Cron job
- Reads runtime system information
-
/tmp/file3XmIaP/tmp/x86.elf9⤵
- Writes file to system bin folder
- Creates/modifies Cron job
- Reads runtime system information
-
/tmp/file5ZykLq/tmp/x86.elf10⤵
- Writes file to system bin folder
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/fileDDfIs8/tmp/x86.elf11⤵
- Writes file to system bin folder
-
/tmp/fileunhHsI/tmp/x86.elf12⤵
- Creates/modifies Cron job
- Reads runtime system information
-
/tmp/file5uKGhr/tmp/x86.elf13⤵
- Writes file to system bin folder
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/file2XcFl2/tmp/x86.elf14⤵
- Writes file to system bin folder
-
/tmp/file0TJqMC/tmp/x86.elf15⤵
- Writes file to system bin folder
-
/tmp/file853ohm/tmp/x86.elf16⤵
- Creates/modifies Cron job
-
/tmp/fileK7qKvX/tmp/x86.elf17⤵
- Writes file to system bin folder
- Creates/modifies Cron job
-
/tmp/files6xXbG/tmp/x86.elf18⤵
- Writes file to system bin folder
- Writes file to tmp directory
-
/tmp/filetj3iec/tmp/x86.elf19⤵
- Creates/modifies Cron job
-
/tmp/fileWniULL/tmp/x86.elf20⤵
- Writes file to system bin folder
- Creates/modifies Cron job
- Reads runtime system information
-
/tmp/fileT2AB6u/tmp/x86.elf21⤵
- Writes file to system bin folder
- Creates/modifies Cron job
- Reads runtime system information
-
/tmp/filelmZei4/tmp/x86.elf22⤵
- Writes file to system bin folder
- Reads runtime system information
-
/tmp/fileakaYkN/tmp/x86.elf23⤵
- Writes file to system bin folder
- Creates/modifies Cron job
- Reads runtime system information
-
/tmp/fileyikNYj/tmp/x86.elf24⤵
- Writes file to system bin folder
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/fileDxfkeR/tmp/x86.elf25⤵
- Writes file to system bin folder
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/filesOS7tA/tmp/x86.elf26⤵
- Reads runtime system information
-
/tmp/fileR6Ob7h/tmp/x86.elf27⤵
- Creates/modifies Cron job
- Reads runtime system information
-
/tmp/fileVYeSnW/tmp/x86.elf28⤵
- Writes file to system bin folder
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/fileGQxc2z/tmp/x86.elf29⤵
- Writes file to system bin folder
- Creates/modifies Cron job
- Writes file to tmp directory
-
/tmp/filehxd947/tmp/x86.elf30⤵
- Writes file to system bin folder
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/fileb0pfxQ/tmp/x86.elf31⤵
- Creates/modifies Cron job
- Reads runtime system information
-
/tmp/fileIij4Sp/tmp/x86.elf32⤵
- Creates/modifies Cron job
- Reads runtime system information
-
/tmp/fileD9g9e9/tmp/x86.elf33⤵
- Creates/modifies Cron job
- Writes file to tmp directory
-
/tmp/fileQygcTJ/tmp/x86.elf34⤵
- Writes file to system bin folder
- Creates/modifies Cron job
- Reads runtime system information
-
/tmp/fileJMC9vo/tmp/x86.elf35⤵
- Writes file to system bin folder
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/fileDX2Jg3/tmp/x86.elf36⤵
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/fileCWUXMN/tmp/x86.elf37⤵
- Writes file to system bin folder
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/filebREpvn/tmp/x86.elf38⤵
- Writes file to system bin folder
- Reads runtime system information
-
/tmp/fileKIQxr2/tmp/x86.elf39⤵
- Writes file to system bin folder
- Creates/modifies Cron job
-
/tmp/file5KbqJE/tmp/x86.elf40⤵
- Writes file to system bin folder
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/filewVahcn/tmp/x86.elf41⤵
- Writes file to system bin folder
- Creates/modifies Cron job
-
/tmp/filedij46W/tmp/x86.elf42⤵
- Writes file to system bin folder
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/fileFI2yOx/tmp/x86.elf43⤵
- Writes file to system bin folder
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/fileqSIHRe/tmp/x86.elf44⤵
- Writes file to system bin folder
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/filefqtYJR/tmp/x86.elf45⤵
- Writes file to system bin folder
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/fileDv6fXz/tmp/x86.elf46⤵
- Creates/modifies Cron job
-
/tmp/fileRq82x9/tmp/x86.elf47⤵
- Writes file to system bin folder
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/filee3MpnL/tmp/x86.elf48⤵
- Writes file to system bin folder
- Creates/modifies Cron job
- Reads runtime system information
-
/tmp/file72biXt/tmp/x86.elf49⤵
- Creates/modifies Cron job
-
/tmp/fileLHtbk8/tmp/x86.elf50⤵
- Writes file to system bin folder
- Creates/modifies Cron job
- Writes file to tmp directory
-
/tmp/filebAOpbR/tmp/x86.elf51⤵
- Creates/modifies Cron job
- Reads runtime system information
-
/tmp/fileYRMNzq/tmp/x86.elf52⤵
- Writes file to system bin folder
- Creates/modifies Cron job
- Writes file to tmp directory
-
/tmp/fileesjWR4/tmp/x86.elf53⤵
- Creates/modifies Cron job
-
/tmp/filexEMKwN/tmp/x86.elf54⤵
- Writes file to system bin folder
- Creates/modifies Cron job
- Reads runtime system information
-
/tmp/fileb6KCvp/tmp/x86.elf55⤵
- Writes file to system bin folder
- Creates/modifies Cron job
- Reads runtime system information
-
/tmp/filefLzgk7/tmp/x86.elf56⤵
- Reads runtime system information
-
/tmp/filembWHlL/tmp/x86.elf57⤵
- Writes file to system bin folder
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/fileDLPyno/tmp/x86.elf58⤵
- Writes file to system bin folder
- Creates/modifies Cron job
- Reads runtime system information
-
/tmp/fileH2d1I7/tmp/x86.elf59⤵
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/fileieW5fH/tmp/x86.elf60⤵
- Writes file to system bin folder
- Creates/modifies Cron job
-
/tmp/file7gbvyg/tmp/x86.elf61⤵
- Writes file to system bin folder
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/fileQlOalZ/tmp/x86.elf62⤵
- Writes file to system bin folder
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/filelyrecA/tmp/x86.elf63⤵
- Writes file to system bin folder
- Reads runtime system information
-
/tmp/fileJqW0R9/tmp/x86.elf64⤵
- Writes file to system bin folder
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/fileP9DivU/tmp/x86.elf65⤵
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/filexTWabx/tmp/x86.elf66⤵
- Writes file to system bin folder
- Creates/modifies Cron job
- Reads runtime system information
-
/tmp/filez6FLJe/tmp/x86.elf67⤵
- Writes file to system bin folder
- Reads runtime system information
-
/tmp/fileK0NhbP/tmp/x86.elf68⤵
- Writes file to system bin folder
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/fileA3UcmA/tmp/x86.elf69⤵
- Writes file to system bin folder
-
/tmp/fileGkVhse/tmp/x86.elf70⤵
- Writes file to system bin folder
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/filewRuVgQ/tmp/x86.elf71⤵
- Writes file to system bin folder
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/file6aiqdu/tmp/x86.elf72⤵
- Writes file to system bin folder
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/file759pBh/tmp/x86.elf73⤵
- Writes file to system bin folder
- Reads runtime system information
-
/tmp/files4z25N/tmp/x86.elf74⤵
- Writes file to system bin folder
- Reads runtime system information
-
/tmp/fileBoRNdv/tmp/x86.elf75⤵
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/fileypG7xb/tmp/x86.elf76⤵
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/fileYLR0HN/tmp/x86.elf77⤵
- Writes file to system bin folder
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/filesMMY6u/tmp/x86.elf78⤵
- Writes file to system bin folder
- Creates/modifies Cron job
- Writes file to tmp directory
-
/tmp/file9sTpyc/tmp/x86.elf79⤵
- Creates/modifies Cron job
- Writes file to tmp directory
-
/tmp/filejNj2aO/tmp/x86.elf80⤵
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/fileeZB2jw/tmp/x86.elf81⤵
- Creates/modifies Cron job
-
/tmp/fileud74B9/tmp/x86.elf82⤵
- Writes file to system bin folder
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/fileq4EowR/tmp/x86.elf83⤵
- Writes file to system bin folder
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/filegk40az/tmp/x86.elf84⤵
- Writes file to system bin folder
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/fileyUWk9i/tmp/x86.elf85⤵
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/fileAm5dlX/tmp/x86.elf86⤵
- Writes file to system bin folder
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/fileDHQbXz/tmp/x86.elf87⤵
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/fileH8Q9ed/tmp/x86.elf88⤵
- Writes file to system bin folder
- Creates/modifies Cron job
-
/tmp/filePBtXDR/tmp/x86.elf89⤵
- Writes file to system bin folder
- Creates/modifies Cron job
- Reads runtime system information
-
/tmp/fileIaNU8u/tmp/x86.elf90⤵
- Reads runtime system information