Analysis

  • max time kernel
    143s
  • max time network
    149s
  • platform
    ubuntu-24.04_amd64
  • resource
    ubuntu2404-amd64-20240523-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
  • submitted
    30-06-2024 02:45

General

  • Target

    7e05474890a7478e1623b219c73d6b1dad09cc3960c0001ed71587234c7768e9.elf

  • Size

    60KB

  • MD5

    89d2011fff1535f1811d61657ea0820c

  • SHA1

    782b7871ec3758b0fccd720b2fc7f155d3a2cddc

  • SHA256

    7e05474890a7478e1623b219c73d6b1dad09cc3960c0001ed71587234c7768e9

  • SHA512

    9fcf76b88ab0da9c42e23fff5592e2e5527bb60c6d6cd02f6e000460ecfce0c5938080b61c732d757e9dea83c2a35e5681628fd983a45afa04aabf769316be6f

  • SSDEEP

    768:BD4fWkmkexEb2thXQ9MnK+jbiL5CtKY1RlgF36OvJVHbHzDMK:Bfmb2thXQ9MKYy5FmlmL7T

Score
9/10

Malware Config

Signatures

  • Contacts a large (8797) amount of remote hosts 1 TTPs

    This may indicate a network scan to discover remotely running services.

  • Loads a kernel module 11 IoCs

    Loads a Linux kernel module, potentially to achieve persistence

  • Creates a large amount of network flows 1 TTPs

    This may indicate a network scan to discover remotely running services.

Processes

  • /tmp/7e05474890a7478e1623b219c73d6b1dad09cc3960c0001ed71587234c7768e9.elf
    /tmp/7e05474890a7478e1623b219c73d6b1dad09cc3960c0001ed71587234c7768e9.elf
    1⤵
    • Loads a kernel module
    PID:2510

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads