fd1b20ee5bd429046d3c04e9c675c41e9095bea70e0329bd32d7edd17ebaf68a

Resubmissions

09-09-2024 06:11

04-09-2024 07:25

15-11-2022 13:09

max time kernel
0s
max time network
180s
platform
ubuntu-20.04_amd64
resource
ubuntu2004-amd64-20240611-en
resource tags

arch:amd64arch:i386image:ubuntu2004-amd64-20240611-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system
submitted
04-09-2024 07:25

Target

fd1b20ee5bd429046d3c04e9c675c41e9095bea70e0329bd32d7edd17ebaf68a.elf
Size

22KB
MD5

aa78b0d9c6351cb664780d9203a331a9
SHA1

5c2aa2735f5c925fd309b41d02f29473448aea68
SHA256

fd1b20ee5bd429046d3c04e9c675c41e9095bea70e0329bd32d7edd17ebaf68a
SHA512

3c4c6ca09c87583a405ec02478b02008548748a747cb4375aaea6b7c780dea2230bc2d5502f1d3f14c55890f34703525ee1c08f6bad41e30e52d21cd922e80fa
SSDEEP

384:ImdtpD0ogxSIafTZquZkBgzspIbMCfZSDFM6HlYGxhq0iFBcTjY4Uy:IYtpD0oDZ/IabDRSD2wlYgq0iFDc

Score

7^/10

Creates Raw socket 1 IoCs
Creates a socket that captures raw packets at the device level

Processes:

pid

1398

pid
1398

Changes its process name 1 IoCs

Processes:

fd1b20ee5bd429046d3c04e9c675c41e9095bea70e0329bd32d7edd17ebaf68a.elf

description	ioc	pid	process
Changes the process name, possibly in an attempt to hide itself	/sbin/auditd -n	1397	fd1b20ee5bd429046d3c04e9c675c41e9095bea70e0329bd32d7edd17ebaf68a.elf

/tmp/fd1b20ee5bd429046d3c04e9c675c41e9095bea70e0329bd32d7edd17ebaf68a.elf
/tmp/fd1b20ee5bd429046d3c04e9c675c41e9095bea70e0329bd32d7edd17ebaf68a.elf
1⤵
- Changes its process name
PID:1397