Overview

overview

10

Static

static

10

2bc28bfff6...d5.elf

ubuntu-18.04-amd64

7

Analysis

  • max time kernel
    153s
  • max time network
    154s
  • platform
    linux_amd64
  • resource
    ubuntu1804-amd64-en-20211208
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    04-07-2023 13:32

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2bc28bfff62f58211afa492fbe15c8d5.elf

  • Size

    60KB

  • MD5

    2bc28bfff62f58211afa492fbe15c8d5

  • SHA1

    eebf820b7c8afbbfdc07a967fd75c462ef358ec4

  • SHA256

    8d052af0e3ec4e7fdb79975cadc002f7e0182793d15fa52c62604d3b402fa1d8

  • SHA512

    89b5aaf8f57722c6e8652d09ad5a435a86a9e2c496ce1101ed066c4f717033de5b0bacde22da4b7a0e2ac1f75e1ad87e941e100f496a0b991f7928419ca3b130

  • SSDEEP

    1536:ESEKY4Jzjw+Qld5UIqZEZtY+fq++dHgVwRe0Hcl2x:m+s+Qj5UIqZEZtjfqLAVwRexl2

Score
7/10

Malware Config

Signatures

  • Changes its process name 1 IoCs
  • Modifies Watchdog functionality 1 TTPs 2 IoCs

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Reads runtime system information 9 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/2bc28bfff62f58211afa492fbe15c8d5.elf
    /tmp/2bc28bfff62f58211afa492fbe15c8d5.elf
    1⤵
    • Changes its process name
    PID:575

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads