Overview

overview

10

Static

static

10

7bc2c217a0...92.elf

ubuntu-18.04-amd64

9

Analysis

  • max time kernel
    41520s
  • max time network
    154s
  • platform
    linux_amd64
  • resource
    ubuntu1804-amd64-en-20211208
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    03-04-2023 06:16

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    7bc2c217a01df86c6e18820f857acf92.elf

  • Size

    61KB

  • MD5

    7bc2c217a01df86c6e18820f857acf92

  • SHA1

    8252306c73be0b967363b20231611cd21b8ef638

  • SHA256

    8e39d36c240e81592cd8bdad771bb918510f8c8ac0e4f50f7af870389ae01889

  • SHA512

    cea39e6eb779bd044718334722c4147b02e952af4d222a287b00a24ebc004362c28f7168e47d3840d0e0a67b0fea0da9a2fd9fc9e0a0fd32f23e8a9c74fdcc75

  • SSDEEP

    1536:dpmbSQ6U3q7cCBT/lZsK/0DiQ4LiKimfFoktCe3fYRMj:WShU3q7cEDlCK/0Dw9i8Fok06fYRc

Score
9/10
discovery

Malware Config

Signatures

  • Contacts a large (37365) amount of remote hosts 1 TTPs

    This may indicate a network scan to discover remotely running services.

    discovery
  • Creates a large amount of network flows 1 TTPs

    This may indicate a network scan to discover remotely running services.

    discovery
  • Reads runtime system information 64 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/7bc2c217a01df86c6e18820f857acf92.elf
    /tmp/7bc2c217a01df86c6e18820f857acf92.elf
    1⤵
      PID:593
    • /bin/sh
      sh -c "rm -rf bin/busybox && mkdir bin; >�f�bin/busybox && mv /tmp/7bc2c217a01df86c6e18820f857acf92.elf bin/busybox; chmod 777 bin/busybox"
      1⤵
        PID:594
        • /bin/rm
          rm -rf bin/busybox
          2⤵
            PID:595
          • /bin/mkdir
            mkdir bin
            2⤵
            • Reads runtime system information
            PID:596
          • /bin/chmod
            chmod 777 bin/busybox
            2⤵
              PID:597

          Network

          MITRE ATT&CK Enterprise v6

          Replay Monitor

          Loading Replay Monitor...

          Downloads