Overview

overview

7

Static

static

1

bot.x86_64.elf

ubuntu-18.04-amd64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bot.x86_64.elf

  • Size

    57KB

  • Sample

    230608-gn6c7scg77

  • MD5

    149b52800cae635e40915f7cbb439b19

  • SHA1

    cf57a3b6fbc30a7adbe00fcc14bf2c1ea282c60b

  • SHA256

    e67f1e64f54fc4f450039905092ad6806f61cc7fc2bd99161370f54a6bfa45d0

  • SHA512

    a9e745cdbfdd6b2ef35da59fdd3e0770ab24f64ce148e82bd3c52ebedfc73cefbf32e288c67e4ea32f45d3b4b9ac8dcde9b6e17872b100a60b27cf197d4f551d

  • SSDEEP

    1536:CkEHOJ/CZGgXIUwfQYmNJwqzqwVwtuHr:CkHpIY/qz5tL

Score
7/10
linux

Malware Config

Targets

    • Target

      bot.x86_64.elf

    • Size

      57KB

    • MD5

      149b52800cae635e40915f7cbb439b19

    • SHA1

      cf57a3b6fbc30a7adbe00fcc14bf2c1ea282c60b

    • SHA256

      e67f1e64f54fc4f450039905092ad6806f61cc7fc2bd99161370f54a6bfa45d0

    • SHA512

      a9e745cdbfdd6b2ef35da59fdd3e0770ab24f64ce148e82bd3c52ebedfc73cefbf32e288c67e4ea32f45d3b4b9ac8dcde9b6e17872b100a60b27cf197d4f551d

    • SSDEEP

      1536:CkEHOJ/CZGgXIUwfQYmNJwqzqwVwtuHr:CkHpIY/qz5tL

    Score
    7/10

    • Changes its process name

    • Deletes itself

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    behavioral1

MITRE ATT&CK Matrix

Tasks