Overview

overview

10

Static

static

10

156226c909...f8.elf

ubuntu-18.04-amd64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    156226c90974180cc4b5f9738e80f1f8.elf

  • Size

    27KB

  • Sample

    231231-p298bacahr

  • MD5

    156226c90974180cc4b5f9738e80f1f8

  • SHA1

    ed0cd45c3bb95ef8da214048799395e247040d17

  • SHA256

    4c5cf8f977fc7c368a8e095700a44be36c8332462c0b1e41bff03238b2bf2a2d

  • SHA512

    8915d1e0a42d8981b0260458a1d9769a29d45fcdd35f238caacbe7ffe8b6aa711c56c0b3afc550c0c33c58dc07ed0ba2444457dcc45665cb15d50f07fc9b82b6

  • SSDEEP

    768:vtDPYOFMXrThYxt+2ZcMyObDRSDfPrgd0iFngrJ+et:RPYOFMXrThYxttcMyOh0iFgrMe

Score
10/10
bpfdoorbackdoorlinux

Malware Config

Targets

    • Target

      156226c90974180cc4b5f9738e80f1f8.elf

    • Size

      27KB

    • MD5

      156226c90974180cc4b5f9738e80f1f8

    • SHA1

      ed0cd45c3bb95ef8da214048799395e247040d17

    • SHA256

      4c5cf8f977fc7c368a8e095700a44be36c8332462c0b1e41bff03238b2bf2a2d

    • SHA512

      8915d1e0a42d8981b0260458a1d9769a29d45fcdd35f238caacbe7ffe8b6aa711c56c0b3afc550c0c33c58dc07ed0ba2444457dcc45665cb15d50f07fc9b82b6

    • SSDEEP

      768:vtDPYOFMXrThYxt+2ZcMyObDRSDfPrgd0iFngrJ+et:RPYOFMXrThYxttcMyOh0iFgrMe

    Score
    10/10
    bpfdoorbackdoor

    • BPFDoor

      BPFDoor is an evasive Linux backdoor attributed to a Chinese threat actor called Red Menshen.

      backdoorbpfdoor

    • BPFDoor payload

    behavioral1

MITRE ATT&CK Matrix

Tasks