Overview

overview

9

Static

static

1

a861f22316...26.elf

ubuntu-18.04-amd64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    a861f22316198a3d223c9a612b510d5eb2177a6c11d2f081d4e7c8499b0edf26.elf

  • Size

    111KB

  • Sample

    240409-cbr8laah32

  • MD5

    6ce18ef97dc28ad721bcb26d84178aca

  • SHA1

    9af7348ce37b96cb262e4fc90920778d4af77d68

  • SHA256

    a861f22316198a3d223c9a612b510d5eb2177a6c11d2f081d4e7c8499b0edf26

  • SHA512

    4d4f926ae71756fbadb34c58cc3990e5f7245620fc6bfd705f19bc85da813d6f165a169fae8af3b6c0458635286eb50984c793be9d2098b5c24464287fa302d9

  • SSDEEP

    1536:5tyBeAZDJCRBMjvG4FGV94lXkGLy+GB2NccmAx9HSUt2Q7xW3N:nPWDJaKpoQKGNGcNcayuI3N

Score
9/10
discoverylinux

Malware Config

Targets

    • Target

      a861f22316198a3d223c9a612b510d5eb2177a6c11d2f081d4e7c8499b0edf26.elf

    • Size

      111KB

    • MD5

      6ce18ef97dc28ad721bcb26d84178aca

    • SHA1

      9af7348ce37b96cb262e4fc90920778d4af77d68

    • SHA256

      a861f22316198a3d223c9a612b510d5eb2177a6c11d2f081d4e7c8499b0edf26

    • SHA512

      4d4f926ae71756fbadb34c58cc3990e5f7245620fc6bfd705f19bc85da813d6f165a169fae8af3b6c0458635286eb50984c793be9d2098b5c24464287fa302d9

    • SSDEEP

      1536:5tyBeAZDJCRBMjvG4FGV94lXkGLy+GB2NccmAx9HSUt2Q7xW3N:nPWDJaKpoQKGNGcNcayuI3N

    Score
    9/10
    discovery

    • Contacts a large (37631) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Changes its process name

    • Deletes itself

    • Traces itself

      Traces itself to prevent debugging attempts

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks