Malware Analysis Report

2025-08-06 00:00

Sample ID 240506-28414aag99
Target 3a09a74cf6c47d69f025c205fde89bc9.elf
SHA256 1f170141be3baceaf4ba1f2281644894588da2ed02a2f5a75ab32d49da644dec
Tags
score
3/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
3/10

SHA256

1f170141be3baceaf4ba1f2281644894588da2ed02a2f5a75ab32d49da644dec

Threat Level: Likely benign

The file 3a09a74cf6c47d69f025c205fde89bc9.elf was found to be: Likely benign.

Malicious Activity Summary


Reads runtime system information

MITRE ATT&CK

N/A

Analysis: static1

Detonation Overview

Reported

2024-05-06 23:16

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-05-06 23:16

Reported

2024-05-06 23:18

Platform

ubuntu1804-amd64-20240418-en

Max time kernel

0s

Max time network

130s

Command Line

[/tmp/3a09a74cf6c47d69f025c205fde89bc9.elf]

Signatures

Reads runtime system information

Description Indicator Process Target
File opened for reading /proc/1545/exe /tmp/3a09a74cf6c47d69f025c205fde89bc9.elf N/A
File opened for reading /proc/filesystems /bin/mkdir N/A
File opened for reading /proc/filesystems /bin/mv N/A

Processes

/tmp/3a09a74cf6c47d69f025c205fde89bc9.elf

[/tmp/3a09a74cf6c47d69f025c205fde89bc9.elf]

/bin/sh

[sh -c mkdir /vo191bbqcs/ && >/vo191bbqcs/vo191bbqcs && cd /vo191bbqcs/ >/dev/null]

/bin/mkdir

[mkdir /vo191bbqcs/]

/bin/sh

[sh -c mv /tmp/3a09a74cf6c47d69f025c205fde89bc9.elf /vo191bbqcs/vo191bbqcs && chmod 777 /vo191bbqcs/vo191bbqcs >/dev/null]

/bin/mv

[mv /tmp/3a09a74cf6c47d69f025c205fde89bc9.elf /vo191bbqcs/vo191bbqcs]

/bin/chmod

[chmod 777 /vo191bbqcs/vo191bbqcs]

Network

Country Destination Domain Proto
US 151.101.194.49:443 tcp
GB 185.125.188.61:443 tcp
GB 185.125.188.61:443 tcp
US 151.101.65.91:443 tcp
US 151.101.65.91:443 tcp
US 154.40.33.94:5683 tcp
N/A 224.0.0.251:5353 udp
GB 195.181.164.14:443 tcp

Files

N/A