Overview

overview

7

Static

static

1

1fa6befa83...72.elf

ubuntu-18.04-amd64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1fa6befa83300967bbd31b7aa745f972.elf

  • Size

    60KB

  • Sample

    240521-mpdbpsae4v

  • MD5

    1fa6befa83300967bbd31b7aa745f972

  • SHA1

    8a09dc37d02796146b40e336c7a9c9c5ebba4e8b

  • SHA256

    3b7e69fb314ffdeb13c36e9ecf20a9476f34374c30ce437dea4e0db193ceb1d8

  • SHA512

    a90fb7b23ae9087db504b1778b1bbbca16b147e5cf68646045f710032a8cf5fb92561525fd8df41b0584de83313bc099711f3f4081d781be713031ef8b6dfb41

  • SSDEEP

    1536:W/4vP/fDv1Y7GuNNq4vMSvglokUx3108OFfGPw/62cHBwr:Aa71Y7GuK4vn3+E9HO

Score
7/10
antivmlinux

Malware Config

Targets

    • Target

      1fa6befa83300967bbd31b7aa745f972.elf

    • Size

      60KB

    • MD5

      1fa6befa83300967bbd31b7aa745f972

    • SHA1

      8a09dc37d02796146b40e336c7a9c9c5ebba4e8b

    • SHA256

      3b7e69fb314ffdeb13c36e9ecf20a9476f34374c30ce437dea4e0db193ceb1d8

    • SHA512

      a90fb7b23ae9087db504b1778b1bbbca16b147e5cf68646045f710032a8cf5fb92561525fd8df41b0584de83313bc099711f3f4081d781be713031ef8b6dfb41

    • SSDEEP

      1536:W/4vP/fDv1Y7GuNNq4vMSvglokUx3108OFfGPw/62cHBwr:Aa71Y7GuK4vn3+E9HO

    Score
    7/10
    antivm

    • Deletes itself

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Impair Defenses

1
T1562

Virtualization/Sandbox Evasion

1
T1497

Credential Access

Discovery

Virtualization/Sandbox Evasion

1
T1497

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks