Overview

overview

10

Static

static

10

258d0909cc...2f.elf

ubuntu-18.04-amd64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    258d0909cc787df408b45750e3f42b2f.elf

  • Size

    125KB

  • Sample

    230529-j6pjhsae98

  • MD5

    258d0909cc787df408b45750e3f42b2f

  • SHA1

    af25473eaf9a192e833edec03160b5b21ae9b490

  • SHA256

    d9e744002672fa1649b09e8d322025203c282cd03f22fdfb573becce41427972

  • SHA512

    2a760570484cc9507ed79881b9d8163d08381ee1b4a921c15454e125042b5e592c6af484018ee528172246e9a6f3a7d30e801e675ab8287ec8efd6f67a616e3c

  • SSDEEP

    3072:5pv0iBKQguBBmX8WGNQ1S0HULbr2kLtgt5Z:5pv9BKrujFWG6S0O0Z

Score
10/10
miraidiscoverylinux

Malware Config

Targets

    • Target

      258d0909cc787df408b45750e3f42b2f.elf

    • Size

      125KB

    • MD5

      258d0909cc787df408b45750e3f42b2f

    • SHA1

      af25473eaf9a192e833edec03160b5b21ae9b490

    • SHA256

      d9e744002672fa1649b09e8d322025203c282cd03f22fdfb573becce41427972

    • SHA512

      2a760570484cc9507ed79881b9d8163d08381ee1b4a921c15454e125042b5e592c6af484018ee528172246e9a6f3a7d30e801e675ab8287ec8efd6f67a616e3c

    • SSDEEP

      3072:5pv0iBKQguBBmX8WGNQ1S0HULbr2kLtgt5Z:5pv9BKrujFWG6S0O0Z

    Score
    9/10
    discovery

    • Contacts a large (1146904) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Changes its process name

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks