Analysis
-
max time kernel
148s -
max time network
141s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20231215-en -
resource tags
-
submitted
08/01/2024, 20:49
General
-
Target
5e243f9c409fe775f51c874d4c71aa99b5520881f0bfefefb57a8985222b585b.elf
-
Size
97KB
-
MD5
ed8f80a1e4afaf813fe292232961aa03
-
SHA1
e7f47fa6268d934379b068c7bfbbd262d7b74317
-
SHA256
5e243f9c409fe775f51c874d4c71aa99b5520881f0bfefefb57a8985222b585b
-
SHA512
1b8fd7c0db6caaaf89b4479ffa9ecb583ed8b42c8b0504606efe3dbe6af4779a1954bf3a433ce3ebcb13f2b5e6adc5cc87fc9275f709790a9db4fdb2d04b4558
-
SSDEEP
3072:VK1z13U6HzHoXRtmTUhQog+EmmFVcqq0GnDZT:VK7DDeKlog+EmmFVcqq0GnDZT
Score
7/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/5e243f9c409fe775f51c874d4c71aa99b5520881f0bfefefb57a8985222b585b.elf/tmp/5e243f9c409fe775f51c874d4c71aa99b5520881f0bfefefb57a8985222b585b.elf1⤵
- Changes its process name
- Reads system routing table
- Reads system network configuration