Overview

overview

9

Static

static

7

19a06de9a8...4d.elf

ubuntu-24.04-amd64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2e4ac48e6a716e4ebb19942a6e1ba71c.bin

  • Size

    1.6MB

  • Sample

    240606-cdt5zaec7w

  • MD5

    9adddfbe97f709c5ca2816bdb119303d

  • SHA1

    fb750f57e13f3ac896c96b0331d03a9b22a73e75

  • SHA256

    0ea349d6384fae63b8c4e861f612c5514a3cb14fc5a702d0cf188b8484f6db7a

  • SHA512

    984267a07b3cc56542956ac51a79a56ec79b5d9f5700de1af7c9345001931cca0ef29eb55d9d4274c7bec07de996fbb102424db8be28bff0fc20907b23d63fb9

  • SSDEEP

    49152:NY/enF0yRwG9EyIR0obPF2jNKtbFO5k/eX:NUeF0hQphojKNgFO5v

Score
9/10
discoverylinuxmotwphishingupx

Malware Config

Targets

    • Target

      19a06de9a8b66196fa6cc9e86824dee577e462cbeaf36d715c8fea5bcb08b54d.elf

    • Size

      1.6MB

    • MD5

      2e4ac48e6a716e4ebb19942a6e1ba71c

    • SHA1

      0b5f3da0ad9c3f30a5eee4f266b28f71dc5c1f50

    • SHA256

      19a06de9a8b66196fa6cc9e86824dee577e462cbeaf36d715c8fea5bcb08b54d

    • SHA512

      e4a60864915bf0a4f9f8c33900409fb26c99bc07c8f55537bc59d4d7a7572adb45cab1864c9badb649401835aa4fd9941ea3d5b7e11f4af8550f8d54b377b8fa

    • SSDEEP

      49152:HFNBB4VZtmRnylRgF7xPs1Kx3sAG4YUgoRx0FnLnY76aplUd6ECu:lNDgG3BxPtRGLntLn/c86i

    Score
    9/10
    discoverymotwphishing

    • Contacts a large (1322048) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Mark of the Web detected: This indicates that the page was originally saved or cloned.

      phishingmotw
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks