Overview

overview

9

Static

static

1

4f9a0b1930...JC.elf

ubuntu-18.04-amd64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    4f9a0b1930467cc08c7bb187898c2c6993f897aaff6849231fd70e473ecdd2da_JC.elf

  • Size

    103KB

  • Sample

    230826-rtpmraah87

  • MD5

    574e9706a21d08244a40cab209bc6bf0

  • SHA1

    141597e18b9611521944209e847b65b33a4873b6

  • SHA256

    4f9a0b1930467cc08c7bb187898c2c6993f897aaff6849231fd70e473ecdd2da

  • SHA512

    a20779c4d6f0684833fd746bc680db41eabca3f49e95bcddada1e32b667c4ef0a19568770320c552586034bee80d9414cab489a2d08d776073e5b7928282ec47

  • SSDEEP

    1536:m3YQ38LN2MWbiBqSLLhch8yQ/m3slqwjSqt2gl6oJkSjxIrD:aT38LcbkqSXeJam3AqwjFEgXxjoD

Score
9/10
discoverylinux

Malware Config

Targets

    • Target

      4f9a0b1930467cc08c7bb187898c2c6993f897aaff6849231fd70e473ecdd2da_JC.elf

    • Size

      103KB

    • MD5

      574e9706a21d08244a40cab209bc6bf0

    • SHA1

      141597e18b9611521944209e847b65b33a4873b6

    • SHA256

      4f9a0b1930467cc08c7bb187898c2c6993f897aaff6849231fd70e473ecdd2da

    • SHA512

      a20779c4d6f0684833fd746bc680db41eabca3f49e95bcddada1e32b667c4ef0a19568770320c552586034bee80d9414cab489a2d08d776073e5b7928282ec47

    • SSDEEP

      1536:m3YQ38LN2MWbiBqSLLhch8yQ/m3slqwjSqt2gl6oJkSjxIrD:aT38LcbkqSXeJam3AqwjFEgXxjoD

    Score
    9/10
    discovery

    • Contacts a large (94353) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Changes its process name

    • Enumerates running processes

      Discovers information about currently running processes on the system

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks