General

  • Target

    b3edfffa9e44c5302380ba764ee69a326e672e507ed645aee13b31f601d3afbf.elf

  • Size

    133KB

  • Sample

    240521-rt3vdahb57

  • MD5

    eb4d38c6daf0fb851fc684ef289a4b15

  • SHA1

    e96caeaf10081d204b050bb237b4bed258410490

  • SHA256

    b3edfffa9e44c5302380ba764ee69a326e672e507ed645aee13b31f601d3afbf

  • SHA512

    2f60c5adc3f8acf3edfc69736407fb5e2c8c736c859925460a65ff570d2751b764a2fb9ff5a9e565b92b3668aea0a70300fc548d5a3a3f6787f3bdc8a4e0a40e

  • SSDEEP

    3072:FE75Gg8WxpvMniiOJiH0gn6uqKmZ6MVuocYJ:eGg8WDvRBy6DKmZ6MVLcYJ

Score
9/10

Malware Config

Targets

    • Target

      b3edfffa9e44c5302380ba764ee69a326e672e507ed645aee13b31f601d3afbf.elf

    • Size

      133KB

    • MD5

      eb4d38c6daf0fb851fc684ef289a4b15

    • SHA1

      e96caeaf10081d204b050bb237b4bed258410490

    • SHA256

      b3edfffa9e44c5302380ba764ee69a326e672e507ed645aee13b31f601d3afbf

    • SHA512

      2f60c5adc3f8acf3edfc69736407fb5e2c8c736c859925460a65ff570d2751b764a2fb9ff5a9e565b92b3668aea0a70300fc548d5a3a3f6787f3bdc8a4e0a40e

    • SSDEEP

      3072:FE75Gg8WxpvMniiOJiH0gn6uqKmZ6MVuocYJ:eGg8WDvRBy6DKmZ6MVLcYJ

    Score
    9/10
    • Contacts a large (39550) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks