General
- Target 2e0aa3da45a0360d051359e1a038beff8551b957698f21756cfc6ed5539e4bdb.bin
- Size 30KB
- Sample230906-a613wace39
- SHA256 2e0aa3da45a0360d051359e1a038beff8551b957698f21756cfc6ed5539e4bdb
Score
10/10
Malware Config
Targets
-
- Target 2e0aa3da45a0360d051359e1a038beff8551b957698f21756cfc6ed5539e4bdb.bin
- Size 30KB
- SHA256 2e0aa3da45a0360d051359e1a038beff8551b957698f21756cfc6ed5539e4bdb
Score10/10-
BPFDoor
BPFDoor is an evasive Linux backdoor attributed to a Chinese threat actor called Red Menshen.
-
BPFDoor payload
-
Changes its process name
-
Creates Raw socket
Creates a socket that captures raw packets at the device level
-
Executes dropped EXE