2eec07cfa7693677249c2c2d7ff1e11659b668389379d39f3e47a71ea2470365

Analysis

max time kernel
147s
max time network
133s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240226-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240226-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
08-03-2024 18:05

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

assailant.x86.elf
Size

109KB
MD5

f1852b42216bfe122a6cbf995ec5f600
SHA1

4acad887916b48b936d4e8c8a7f95f42190f2503
SHA256

2eec07cfa7693677249c2c2d7ff1e11659b668389379d39f3e47a71ea2470365
SHA512

33b88748dc6374cb47bdb049b4db715d9c480d6be69f8076e865b85563ec216227e1963a41e72e914a79d0445d932d513b62cbfea8fd4037e97d05ee91d2859c
SSDEEP

3072:NF2ndCa9qRBFZm4z1EYfcbJuphaFsfDJv03CKPCNVOXinYuM8R:4MVm4z6Yg0phaFI9cFPCNVOXinYuM8R

Score

7^/10

Malware Config

Signatures

Changes its process name 1 IoCs

description	pid	Process
Changes the process name, possibly in an attempt to hide itself	1564	assailant.x86.elf

Writes DNS configuration 1 TTPs 1 IoCs

Writes data to DNS resolver config file.

Dynamic Resolution

T1568

description	ioc
File opened for modification	/etc/resolv.conf

/tmp/assailant.x86.elf
/tmp/assailant.x86.elf
1⤵
- Changes its process name
PID:1564

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Dynamic Resolution

T1568

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads