8ad36b0ae69809e85c601b061ca76abd8150bf8806e6e6d91c50ea63a1bd280a

Analysis

max time kernel
147s
max time network
133s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240226-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240226-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
09-03-2024 02:47

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8ad36b0ae69809e85c601b061ca76abd8150bf8806e6e6d91c50ea63a1bd280a.elf
Size

97KB
MD5

fd60041890d5960749df426cf6874aaa
SHA1

52fdbb154b2feb20c93e044cf6af0bb9e386be2c
SHA256

8ad36b0ae69809e85c601b061ca76abd8150bf8806e6e6d91c50ea63a1bd280a
SHA512

d69c32b0fcd8e3b019002b2394ceae2a1b3b894b36b27428501adcb05295a07a510b69b532fba03954d2e0c21ea80fbb1a62dfdea5bc190634ea07ea3cef364d
SSDEEP

3072:1MoaodUWUh917j8mc2deiPUDAZURyPfD5hFTOvxinf0OzTyoQQub:1dRu917j8mc2H5Z5Pr5hFQxinf0OzTyv

Score

7^/10

Malware Config

Signatures

Changes its process name 1 IoCs

description	pid	Process
Changes the process name, possibly in an attempt to hide itself	1528	8ad36b0ae69809e85c601b061ca76abd8150bf8806e6e6d91c50ea63a1bd280a.elf

Writes DNS configuration 1 TTPs 1 IoCs

Writes data to DNS resolver config file.

Dynamic Resolution

T1568

description	ioc
File opened for modification	/etc/resolv.conf

/tmp/8ad36b0ae69809e85c601b061ca76abd8150bf8806e6e6d91c50ea63a1bd280a.elf
/tmp/8ad36b0ae69809e85c601b061ca76abd8150bf8806e6e6d91c50ea63a1bd280a.elf
1⤵
- Changes its process name
PID:1528

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Dynamic Resolution

T1568

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads