General

  • Target

    d588c5a95c74bcee8b39e205121805c0.elf

  • Size

    61KB

  • Sample

    240311-lg2hwsgf81

  • MD5

    d588c5a95c74bcee8b39e205121805c0

  • SHA1

    7388e3e52254ca75e9266051850455eb3f12b07c

  • SHA256

    adceea0e6e846f2b7d0633b1fc64f62301ab20f8921bb77c1613e2de58939c2d

  • SHA512

    3bbc6ed6a13046e942db8dc10b4fe5c8e98e72f0dca4d0194c11628e3473112e05c88cf9214d34833e4a4701dd9b7cf4cf133598fdd9777945ecdb3ef30c4db9

  • SSDEEP

    1536:y7s0x7T4Ulds1bD8l5uFKgisX/uteQgHDF:y7s0VK1OkFKgis2Rgp

Score
10/10

Malware Config

Targets

    • Target

      d588c5a95c74bcee8b39e205121805c0.elf

    • Size

      61KB

    • MD5

      d588c5a95c74bcee8b39e205121805c0

    • SHA1

      7388e3e52254ca75e9266051850455eb3f12b07c

    • SHA256

      adceea0e6e846f2b7d0633b1fc64f62301ab20f8921bb77c1613e2de58939c2d

    • SHA512

      3bbc6ed6a13046e942db8dc10b4fe5c8e98e72f0dca4d0194c11628e3473112e05c88cf9214d34833e4a4701dd9b7cf4cf133598fdd9777945ecdb3ef30c4db9

    • SSDEEP

      1536:y7s0x7T4Ulds1bD8l5uFKgisX/uteQgHDF:y7s0VK1OkFKgis2Rgp

    Score
    7/10
    • Changes its process name

    • Deletes itself

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks