868891f4f0e322d258224ca43c84c055c21babac5fe1ae87542b8888ab3f0b33

Analysis

max time kernel
147s
max time network
144s
platform
ubuntu-20.04_amd64
resource
ubuntu2004-amd64-20240221-en
resource tags

arch:amd64arch:i386image:ubuntu2004-amd64-20240221-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system
submitted
01/04/2024, 18:23

Target
15d708c60aa5c721679a06c5b1323b22.elf
Size 109KB
Sample240401-w1fqmsca39
SHA256 868891f4f0e322d258224ca43c84c055c21babac5fe1ae87542b8888ab3f0b33
MD5 15d708c60aa5c721679a06c5b1323b22
SHA1 77d75deebe4937c71448e89e5e7bbb73f90bb14e
SHA512 f383eb5a2c550f6fed9098e1c51f56dd8de66122fae6847baaf7008077e48efd85058ee80d1fd6a20518b3fa8f998dbb7e547986cf35da11f1b78d9541596c2f
SSDEEP 3072:Ft2nlia9qRBFZm4z1EYfcbJrphawfWJv03CKPCNVOXinYuM8R:gsVm4z6YgNphasCcFPCNVOXinYuM8R
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Changes its process name 1 IoCs

description	pid	Process
Changes the process name, possibly in an attempt to hide itself	1462	15d708c60aa5c721679a06c5b1323b22.elf

Writes DNS configuration 1 TTPs 1 IoCs

Writes data to DNS resolver config file.

Dynamic Resolution

description	ioc
File opened for modification	/etc/resolv.conf

/tmp/15d708c60aa5c721679a06c5b1323b22.elf
/tmp/15d708c60aa5c721679a06c5b1323b22.elf
1⤵
- Changes its process name
PID:1462

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Dynamic Resolution

Exfiltration

Impact