Extracted

• • Target

    353a2334ab8edc23860ba493e7dc648b.elf

  • Size

    148KB

  • MD5

    353a2334ab8edc23860ba493e7dc648b

  • SHA1

    00baca913d3d7ef33ed352c37c505ffa4859215e

  • SHA256

    749323cfb597821692df02dbd309c1331099460822b24663dae16a065d23d2ff

  • SHA512

    787a51bb5592c3d4506adc8fb50829da49d0b8348f332f0d6692ed5bcae754896dec44659c8e9f8181c8a939293eb13f82b74d98118b1120ced4f95057ebcf3b

  • SSDEEP

    3072:HE9rx5elUUrxUVVpSE8JqMPOltGDalhupRwWriH90PfNatph1:MxPaEx9MGlSekiH90PfNatph1

  Score

  7^/10

  evasion

  • Changes its process name

  • Deletes Audit logs

    Deletes logs related to the Linux Audit framework.

    evasion

  • Deletes journal logs

    Deletes systemd journal logs. Likely to evade detection.

    evasion

  • Deletes system logs

    Deletes log file which contains global system messages. Adversaries may delete system logs to minimize their footprint.

    evasion

  • Flushes firewall rules

    Flushes/ disables firewall rules inside the Linux kernel.

  • Writes DNS configuration

    Writes data to DNS resolver config file.

  • Deletes log files

    Deletes log files on the system.

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Reads CPU attributes

  • Reads system routing table

    Gets active network interfaces from /proc virtual filesystem.

  behavioral1