2e4084988aa86eac4899071f894542f23db004d650b8fabe6ae64821314fb56a

Analysis

max time kernel
152s
max time network
154s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20230621-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20230621-enkernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
26/08/2023, 14:19

Target

2e4084988aa86eac4899071f894542f23db004d650b8fabe6ae64821314fb56a_JC.elf
Size

85KB
MD5

8d1375768dc489689a6c019c66189c46
SHA1

d94e5f3d1e8d6663106e999b9b2e39574c3895de
SHA256

2e4084988aa86eac4899071f894542f23db004d650b8fabe6ae64821314fb56a
SHA512

446f67247434fde6750daf09eadc9dce388f37b130e87d1d8a439ec09a70d374b44af97822ee6e8fa7eea4060dd3386889f6ba1555e5d389150f237d7fde84e8
SSDEEP

1536:gbuGt+BMy1KRtnH7AYLiTJrY3f+4vnn5IvGxQwOFyfQ+tJ33In24n+ZrUgO:wur/12nH7iTJrI3GvTwFfJ3Y24+Zr3

Score

7^/10

Changes its process name 4 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	daddyl33t's back	595	2e4084988aa86eac4899071f894542f23db004d650b8fabe6ae64821314fb56a_JC.elf
Changes the process name, possibly in an attempt to hide itself		595	2e4084988aa86eac4899071f894542f23db004d650b8fabe6ae64821314fb56a_JC.elf
Changes the process name, possibly in an attempt to hide itself		598	Process not Found
Changes the process name, possibly in an attempt to hide itself		597	Process not Found

Writes DNS configuration 1 TTPs 1 IoCs

Writes data to DNS resolver config file.

Dynamic Resolution

description	ioc
File opened for modification	/etc/resolv.conf

/tmp/2e4084988aa86eac4899071f894542f23db004d650b8fabe6ae64821314fb56a_JC.elf
/tmp/2e4084988aa86eac4899071f894542f23db004d650b8fabe6ae64821314fb56a_JC.elf
1⤵
- Changes its process name
PID:595

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Dynamic Resolution

Exfiltration

Impact