Analysis Overview
score
10/10
SHA256
34b3f0b53444feeda0c189576acb0b980a5b35bd74f9ec3fe39a3b507fb2703c
Threat Level: Known bad
The file 34b3f0b53444feeda0c189576acb0b980a5b35bd74f9ec3fe39a3b507fb2703c.elf was found to be: Known bad.
Malicious Activity Summary
Detected Echobot
Echobot family
Mirai family
MITRE ATT&CK
N/A
Analysis: static1
Detonation Overview
Reported
2024-05-29 01:18
Signatures
Detected Echobot
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
Echobot family
Mirai family
Analysis: behavioral1
Detonation Overview
Submitted
2024-05-29 01:18
Reported
2024-05-29 01:21
Platform
ubuntu2204-amd64-20240522-en
Max time network
132s
Command Line
N/A
Signatures
N/A
Processes
N/A
Network
| Country | Destination | Domain | Proto |
| N/A | 224.0.0.251:5353 | udp | |
| US | 8.8.8.8:53 | _http._tcp.security.ubuntu.com | udp |
| US | 8.8.8.8:53 | _http._tcp.se.archive.ubuntu.com | udp |
| US | 8.8.8.8:53 | security.ubuntu.com | udp |
| US | 8.8.8.8:53 | security.ubuntu.com | udp |
| US | 8.8.8.8:53 | se.archive.ubuntu.com | udp |
| US | 8.8.8.8:53 | se.archive.ubuntu.com | udp |
| GB | 185.125.190.36:80 | security.ubuntu.com | tcp |
| SE | 194.71.11.165:80 | se.archive.ubuntu.com | tcp |
| US | 8.8.8.8:53 | _http._tcp.saimei.ftp.acc.umu.se | udp |
| US | 8.8.8.8:53 | _http._tcp.chuangtzu.ftp.acc.umu.se | udp |
| US | 1.1.1.1:53 | _http._tcp.saimei.ftp.acc.umu.se | udp |
| US | 1.1.1.1:53 | _http._tcp.chuangtzu.ftp.acc.umu.se | udp |
| US | 1.1.1.1:53 | saimei.ftp.acc.umu.se | udp |
| US | 1.1.1.1:53 | saimei.ftp.acc.umu.se | udp |
| US | 1.1.1.1:53 | chuangtzu.ftp.acc.umu.se | udp |
| US | 1.1.1.1:53 | chuangtzu.ftp.acc.umu.se | udp |
| SE | 194.71.11.138:80 | saimei.ftp.acc.umu.se | tcp |
| SE | 194.71.11.167:80 | chuangtzu.ftp.acc.umu.se | tcp |
Files
N/A