Analysis

  • max time kernel
    23s
  • max time network
    99s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20230831-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20230831-enkernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    11-10-2023 02:49

General

  • Target

    6a7b7147fea63d77368c73cef205eb75d16ef209a246b05698358a28fd16e502.elf

  • Size

    2.0MB

  • MD5

    3f9a28e8c057e7ea7ccf15a4db81f362

  • SHA1

    10d6d3c957facf06098771bf409b9593eea58c75

  • SHA256

    6a7b7147fea63d77368c73cef205eb75d16ef209a246b05698358a28fd16e502

  • SHA512

    58a71aeac247d206f023ee29aff81026881e41d3fbd268f7513e3bcd951701a68502361dd717befa79a094eb9fc0caaa9f8770ba83f5c94a8acb9ae0986ee386

  • SSDEEP

    49152:k5Wy/20shMXR8uUz9cBbLc/6LCM01iNFFB9wO:k5Wy//sO8uDq6

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Reads CPU attributes 1 TTPs 1 IoCs
  • Writes file to tmp directory 2 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/6a7b7147fea63d77368c73cef205eb75d16ef209a246b05698358a28fd16e502.elf
    /tmp/6a7b7147fea63d77368c73cef205eb75d16ef209a246b05698358a28fd16e502.elf
    1⤵
    • Writes file to tmp directory
    PID:606

Network

MITRE ATT&CK Matrix ATT&CK v13

Replay Monitor

Loading Replay Monitor...

Downloads

  • /tmp/.DBFD055C-9CF2-4BB8-908E-6DA22321BF17
    Filesize

    4B

    MD5

    7da043d3a1266b4758132618e90766c3

    SHA1

    9f82e2fb9bbf2365c3121ee4ae0869eb91db0f11

    SHA256

    10fe217426ff1edfa8c796d69f79194f2d0339f84c0debe301e1ecf95ba9bb6a

    SHA512

    8591bed60bc356d34bb8afea0c8992b1207ed4503825a1352b8070f2b7d8a0e67b9f85d9da09585d0f33d235ad508781c1d2f21335697f4774f93444ec5b0cb8

  • /tmp/main.log
    Filesize

    3KB

    MD5

    55cb935eeb23f1f04d314a8b246fce0b

    SHA1

    5fb328949c20e198d8d10b35d125a5b26b9475c3

    SHA256

    ac17bd6914876ee766bf859376b0a75100bcb8e095bb3ad1b1c22369d49118a7

    SHA512

    e3cbab5510f62450f50088c2080377ca526413ae7c689b84a04a16ee020e2a57676b36ae8ec916797233e1f0df2d1a74484eeb102f205df4399545d8ff2870b7