Overview

overview

10

Static

static

10

b7d17097a3...fd.elf

ubuntu-18.04-amd64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cc0cad9f4578cd48adb3f7cd925f1d4d.bin

  • Size

    441B

  • Sample

    230730-cc4ysaff52

  • MD5

    abb8b89cf422795fa86533a1fab83b53

  • SHA1

    bfe6f15e96a95f81ef04a9635d4b5d9d0e37b604

  • SHA256

    1f47d67698e7d7247256744266bc58aeeef08da3bc21366c2d6ba81fdb0a907f

  • SHA512

    dc628dec72024d6fb755bbe9a64fdfd4a523f9fd7ef1bf9563358c6665a9369e42fdadf287d5e84ce8ca6ecfa4d0ba735f1fc763fe2d3e80775988352a48e589

Score
10/10
connectbacklinux

Malware Config

Extracted

Family

connectback

C2

51.15.18.85:53

Targets

    • Target

      b7d17097a334a02f1336771bfb93b1c2f455ef20147aada4683673dce981e1fd.elf

    • Size

      250B

    • MD5

      cc0cad9f4578cd48adb3f7cd925f1d4d

    • SHA1

      ba18c820e3e22c1c0fe0cd652292342dcb7c5638

    • SHA256

      b7d17097a334a02f1336771bfb93b1c2f455ef20147aada4683673dce981e1fd

    • SHA512

      87f62c659e7e4b362713c6ad30d267941889c37d638c09824fbe523756ee67eb6872edbb806422ba349774192cc93423a1b4beb4ea319f6a77b3701cb2b83f5d

    Score
    7/10

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    behavioral1

MITRE ATT&CK Matrix

Tasks