Analysis
-
max time kernel
147s -
max time network
133s -
platform
ubuntu-20.04_amd64 -
resource
ubuntu2004-amd64-20240221-en -
resource tags
arch:amd64arch:i386image:ubuntu2004-amd64-20240221-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system -
submitted
02/04/2024, 01:15
Behavioral task
behavioral1
Sample
8ffa8c43fdc61c96e1a017be3eadff98e0f9d35f08ee9ecdd6da7bf2776d730a.elf
Resource
ubuntu2004-amd64-20240221-en
2 signatures
150 seconds
General
-
Target
8ffa8c43fdc61c96e1a017be3eadff98e0f9d35f08ee9ecdd6da7bf2776d730a.elf
-
Size
97KB
-
MD5
12fb7f29220d76dc1e60623b0db9f86e
-
SHA1
5a16a5226a3c77b075eed1de584d4f3a52527d58
-
SHA256
8ffa8c43fdc61c96e1a017be3eadff98e0f9d35f08ee9ecdd6da7bf2776d730a
-
SHA512
0571ab96e06922ab86a2de9bfd39db475d64f9fcfa4ee57a819cf06f4cd6a4d8e7ef2a7d6b2ae40346e71c613909df70928f9279a8007fd7f89f88f3d26faf84
-
SSDEEP
3072:A2k6Kko6o+ngPmmVjeWntzWfEtv+G3fjKw5hoTuXXnf0OzTyoQQub:jdEsgPmmVjeWnnPjKw5hkuXXnf0OzTyv
Score
7/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
description pid Process Changes the process name, possibly in an attempt to hide itself 1447 8ffa8c43fdc61c96e1a017be3eadff98e0f9d35f08ee9ecdd6da7bf2776d730a.elf -
Writes DNS configuration 1 TTPs 1 IoCs
Writes data to DNS resolver config file.
description ioc File opened for modification /etc/resolv.conf