e1a66ef550b10291622ae7fcd452795c1a5a9ff354deda19a529eb64af895aef

Analysis

max time kernel
0s
max time network
128s
platform
ubuntu-22.04_amd64
resource
ubuntu2204-amd64-20240611-en
resource tags

arch:amd64arch:i386image:ubuntu2204-amd64-20240611-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
submitted
05/07/2024, 06:06

Target

Okami.i586.elf
Size

80KB
MD5

6be88ffbf34d5100c31aff94119dcf02
SHA1

630c86fd0cb45b46ef5747a88c862e0e301fe18d
SHA256

e1a66ef550b10291622ae7fcd452795c1a5a9ff354deda19a529eb64af895aef
SHA512

df77c6f1960c267d9240d348ff775d6c6b60410556881843f30775a272645ac3e21877888f0fed0aaabd5020d7b75f95f917e9054a87e0250aa4fe2d325fa056
SSDEEP

1536:xNqbqkZ12Ue/Wz/P9ZhxUzi+8F0p32cBNY5hlQ6hICMIis3r0OzRPF+jHeN:xgbf12Ue/WDP9xUziB6pm95hlQiItIis

Score

7^/10

Writes DNS configuration 1 TTPs 1 IoCs

Writes data to DNS resolver config file.

Dynamic Resolution

description	ioc	Process
File opened for modification	/etc/resolv.conf	Okami.i586.elf

Changes its process name 1 IoCs

description	pid	Process
Changes the process name, possibly in an attempt to hide itself	1562	Okami.i586.elf

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Dynamic Resolution

Exfiltration

Impact