7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2

General

Target

7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
Size

94KB
MD5

9159ed1d4184f581f602ce511f3856df
SHA1

51d15c375ca30e7eeae643d99baddbbeec15fbaf
SHA256

7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2
SHA512

7166afb45b586571972710638eecb7cb8c606fe428e40276885ae8bdc430e847f189ac342ad015747ecb17dbf01c4d425793fb667914cddd0e22c0939149b54c
SSDEEP

1536:bZxGp9fzWp6y0VH3SwuKXzWNc9ponbXU94uSfcRVF4:VE/fztTXSnmU0p6bE+3uF

Score

6^/10

Malware Config

Signatures

Enumerates running processes
Discovers information about currently running processes on the system

Changes its process name 1 IoCs

Processes:

7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf

description	pid	process
Changes the process name, possibly in an attempt to hide itself	1541	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf

Reads runtime system information 64 IoCs

Reads data from /proc virtual filesystem.

Processes:

7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf

description	ioc	process
File opened for reading	/proc/493/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/657/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/665/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/1048/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/1165/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/1167/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/8/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/19/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/1451/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/905/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/1554/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/79/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/436/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/35/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/36/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/89/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/173/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/212/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/1313/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/15/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/27/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/1330/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/517/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/691/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/1099/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/1157/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/1474/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/1536/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/1/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/9/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/85/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/1188/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/1282/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/1534/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/28/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/82/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/129/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/168/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/83/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/115/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/558/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/1267/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/1364/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/179/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/512/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/17/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/22/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/332/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/685/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/963/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/1127/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/3/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/13/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/1144/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/1153/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/1140/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/1248/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/1537/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/1538/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/1545/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/591/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/1108/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/437/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
File opened for reading	/proc/570/cmdline	7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf

/tmp/7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
/tmp/7f7cb006dce315681939d204cb8c295ce87d021d1bef954dd9b95038265284b2.elf
1⤵
- Changes its process name
- Reads runtime system information
PID:1541

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads