Overview

overview

10

Static

static

10

0795290ee8...4f.elf

ubuntu-18.04-amd64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0795290ee8634caeab4d8c88de21994f.elf

  • Size

    140KB

  • Sample

    230326-qzn3qsgf87

  • MD5

    0795290ee8634caeab4d8c88de21994f

  • SHA1

    c0cea0ab841d7178f29aeec95e79e8c6cf0fc0f0

  • SHA256

    f42df781c510bae352fcd61629f30621eb300f5d495954636ceb2f817b47fdd4

  • SHA512

    5163e56b66854749946e207aced8646207d7f99dd48fb07de3782472ae3160c28c6a54a59e730e6bf2876a5b25d43c7d5c15ec41a91f10ce17488f00d4482642

  • SSDEEP

    3072:K1gdBvfRaBNGYAXXpETbZOutJ8adPF4KQTjsV/43giCDebvfcivGmS+Qk:jaLSX5Y4utJ8adPF4fCqCDebvfci+mSy

Score
10/10
gafgytlinuxpersistence

Malware Config

Targets

    • Target

      0795290ee8634caeab4d8c88de21994f.elf

    • Size

      140KB

    • MD5

      0795290ee8634caeab4d8c88de21994f

    • SHA1

      c0cea0ab841d7178f29aeec95e79e8c6cf0fc0f0

    • SHA256

      f42df781c510bae352fcd61629f30621eb300f5d495954636ceb2f817b47fdd4

    • SHA512

      5163e56b66854749946e207aced8646207d7f99dd48fb07de3782472ae3160c28c6a54a59e730e6bf2876a5b25d43c7d5c15ec41a91f10ce17488f00d4482642

    • SSDEEP

      3072:K1gdBvfRaBNGYAXXpETbZOutJ8adPF4KQTjsV/43giCDebvfcivGmS+Qk:jaLSX5Y4utJ8adPF4fCqCDebvfci+mSy

    Score
    7/10
    persistence

    • Modifies rc script

      Adding/modifying system rc scripts is a common persistence mechanism.

      persistence

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks