2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7

General

Target

2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
Size

94KB
MD5

1377bc582b1460fb6d7af9308d8c275f
SHA1

57e736d17fea0ceff08a49e5c514b90f6da6e4a5
SHA256

2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7
SHA512

5d1aeae5c617da92c17c9a7406dd4397fc467039b2559a14153939e4a6a49510e3e224df17845baf82b9b4f9cf50b90f57052344b83d52dd845307a5cb1c8e0a
SSDEEP

1536:NSo2mItfBWJE2byKjtcgeanSQWN8NZz3LX0t44H+SPcBKlwt:PV8fBW9xcHmUEZjLkO4Hpl

Score

6^/10

Malware Config

Signatures

Enumerates running processes
Discovers information about currently running processes on the system

Changes its process name 1 IoCs

Processes:

2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf

description	pid	process
Changes the process name, possibly in an attempt to hide itself	1491	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf

Reads runtime system information 64 IoCs

Reads data from /proc virtual filesystem.

Processes:

2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf

description	ioc	process
File opened for reading	/proc/162/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/1059/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/1489/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/1493/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/35/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/84/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/115/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/1487/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/461/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/658/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/1013/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/1141/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/1256/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/20/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/169/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/669/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/79/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/165/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/170/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/409/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/602/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/2/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/15/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/23/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/979/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/1038/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/1496/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/82/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/448/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/453/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/1508/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/31/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/1175/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/1187/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/166/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/407/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/636/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/789/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/1144/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/1/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/6/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/10/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/1234/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/1497/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/205/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/410/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/480/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/1346/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/1494/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/78/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/98/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/161/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/17/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/206/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/645/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/1137/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/1147/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/8/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/19/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/167/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/325/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/542/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/685/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
File opened for reading	/proc/981/cmdline	2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf

/tmp/2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
/tmp/2d35d56fba74f7e9c8da180ccdcb479f291389827105b5c2295e466facf379f7.elf
1⤵
- Changes its process name
- Reads runtime system information
PID:1491

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads