General
-
Target
015a5025ba2d3a419165d506f399cef408fb611427debe725a76b44a482c7f24.elf
-
Size
1.8MB
-
Sample
240418-qas1dsfa4s
-
MD5
587dbc8371a8a8e2424eceec829b0763
-
SHA1
4d1afaa6bc5766650c1bdd1ed3169e948032c1ff
-
SHA256
015a5025ba2d3a419165d506f399cef408fb611427debe725a76b44a482c7f24
-
SHA512
78beb44ae9825a063868ece8efa3b5765c77d4bdac0120591fe80aebe46339781c795e488c8b8e3b7edfcf6a10298e7749be234cd78f37eec0eb620504d160b9
-
SSDEEP
49152:AdoCxUiQ7gCnKqiv2my8mrvgYR7fzRs5mMu:qoMkvXO2mGrrntMu
Behavioral task
behavioral1
Sample
015a5025ba2d3a419165d506f399cef408fb611427debe725a76b44a482c7f24.elf
Resource
ubuntu2004-amd64-20240221-en
Malware Config
Targets
-
-
Target
015a5025ba2d3a419165d506f399cef408fb611427debe725a76b44a482c7f24.elf
-
Size
1.8MB
-
MD5
587dbc8371a8a8e2424eceec829b0763
-
SHA1
4d1afaa6bc5766650c1bdd1ed3169e948032c1ff
-
SHA256
015a5025ba2d3a419165d506f399cef408fb611427debe725a76b44a482c7f24
-
SHA512
78beb44ae9825a063868ece8efa3b5765c77d4bdac0120591fe80aebe46339781c795e488c8b8e3b7edfcf6a10298e7749be234cd78f37eec0eb620504d160b9
-
SSDEEP
49152:AdoCxUiQ7gCnKqiv2my8mrvgYR7fzRs5mMu:qoMkvXO2mGrrntMu
Score10/10-
Contacts a large (3878346) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
XMRig Miner payload
-
Changes its process name
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks CPU configuration
Checks CPU information which indicate if the system is a virtual machine.
-
Checks hardware identifiers (DMI)
Checks DMI information which indicate if the system is a virtual machine.
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads CPU attributes
-
Reads hardware information
Accesses system info like serial numbers, manufacturer names etc.
-