2b4b073178b573aa181fdc6e8063c778c90f76235d640c186b99278186509e74

Analysis

max time kernel
147s
max time network
108s
platform
debian-9_mips
resource
debian9-mipsbe-20240226-en
resource tags

arch:mipsimage:debian9-mipsbe-20240226-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
02-04-2024 01:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2b4b073178b573aa181fdc6e8063c778c90f76235d640c186b99278186509e74.elf
Size

150KB
MD5

5d56a442ec59555956e27a72a1cba483
SHA1

002763e66b2f3856d386a9faaf62eab610a3fde1
SHA256

2b4b073178b573aa181fdc6e8063c778c90f76235d640c186b99278186509e74
SHA512

d1d5f40419d3156efa0de16c719f02d853b36a3c409d3d62bd763befa739fc368f86b1823f4881ef2661d66a149cb6fb321178af7db2cf2d46fc5d3fcc5baf85
SSDEEP

3072:f3Yco4c+tKiAY/5hlKdcWDURxuZq+1uPNd5R:v6kB/5hl0lURxuZq+1uPNd5R

Score

7^/10

Malware Config

Signatures

Changes its process name 1 IoCs

description	pid	Process
Changes the process name, possibly in an attempt to hide itself	712	2b4b073178b573aa181fdc6e8063c778c90f76235d640c186b99278186509e74.elf

Writes DNS configuration 1 TTPs 1 IoCs

Writes data to DNS resolver config file.

Dynamic Resolution

T1568

description	ioc
File opened for modification	/etc/resolv.conf

/tmp/2b4b073178b573aa181fdc6e8063c778c90f76235d640c186b99278186509e74.elf
/tmp/2b4b073178b573aa181fdc6e8063c778c90f76235d640c186b99278186509e74.elf
1⤵
- Changes its process name
PID:712

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Dynamic Resolution

T1568

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads