Analysis
-
max time kernel
23s -
max time network
99s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20230831-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20230831-enkernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
11-10-2023 02:49
Behavioral task
behavioral1
Sample
6a7b7147fea63d77368c73cef205eb75d16ef209a246b05698358a28fd16e502.elf
Resource
ubuntu1804-amd64-20230831-en
General
-
Target
6a7b7147fea63d77368c73cef205eb75d16ef209a246b05698358a28fd16e502.elf
-
Size
2.0MB
-
MD5
3f9a28e8c057e7ea7ccf15a4db81f362
-
SHA1
10d6d3c957facf06098771bf409b9593eea58c75
-
SHA256
6a7b7147fea63d77368c73cef205eb75d16ef209a246b05698358a28fd16e502
-
SHA512
58a71aeac247d206f023ee29aff81026881e41d3fbd268f7513e3bcd951701a68502361dd717befa79a094eb9fc0caaa9f8770ba83f5c94a8acb9ae0986ee386
-
SSDEEP
49152:k5Wy/20shMXR8uUz9cBbLc/6LCM01iNFFB9wO:k5Wy//sO8uDq6
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid 607 -
Reads CPU attributes 1 TTPs 1 IoCs
description ioc File opened for reading /sys/devices/system/cpu/online -
Writes file to tmp directory 2 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/.DBFD055C-9CF2-4BB8-908E-6DA22321BF17 6a7b7147fea63d77368c73cef205eb75d16ef209a246b05698358a28fd16e502.elf File opened for modification /tmp/main.log Process not Found
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4B
MD57da043d3a1266b4758132618e90766c3
SHA19f82e2fb9bbf2365c3121ee4ae0869eb91db0f11
SHA25610fe217426ff1edfa8c796d69f79194f2d0339f84c0debe301e1ecf95ba9bb6a
SHA5128591bed60bc356d34bb8afea0c8992b1207ed4503825a1352b8070f2b7d8a0e67b9f85d9da09585d0f33d235ad508781c1d2f21335697f4774f93444ec5b0cb8
-
Filesize
3KB
MD555cb935eeb23f1f04d314a8b246fce0b
SHA15fb328949c20e198d8d10b35d125a5b26b9475c3
SHA256ac17bd6914876ee766bf859376b0a75100bcb8e095bb3ad1b1c22369d49118a7
SHA512e3cbab5510f62450f50088c2080377ca526413ae7c689b84a04a16ee020e2a57676b36ae8ec916797233e1f0df2d1a74484eeb102f205df4399545d8ff2870b7