91a86de01b0a646e6c56d84a070e7ebd4f7d19c81ec56250a3d2ecb94a8470a2

Analysis

max time kernel
0s
max time network
129s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
16/09/2024, 22:28

Target
SecuriteInfo.com.PUA.Tool.Linux.BtcMine.9999.9761.11740.elf
Size 68.1MB
Sample240916-2dm44atalb
SHA256 91a86de01b0a646e6c56d84a070e7ebd4f7d19c81ec56250a3d2ecb94a8470a2
MD5 ec400d6e3b0b03b0bcc4f3d7d8dfe7cb
SHA1 7862e48f17f7246467323648db5ad94f773caecc
SHA512 63986aeabf209ac382742fe71324b1475c6d17f5320cc88d004c588f1429e6e511c8db5ac3820dbbc58852d81fc8c23cfba64464b7ea9fe79e3b9f28856cc8d3
SSDEEP 1572864:P9vdT5+vS1e6yQIZzbYzGF5SghrbD+uz9uJ2zlM0yLq/qlmHt0rwBIPZf+umP:FFT5+K1er10zGLXbyU9uIBM0mqPlSc
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Enumerates kernel/hardware configuration 1 TTPs 3 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

System Information Discovery

description	ioc	Process
File opened for reading	/sys/class/drm	SecuriteInfo.com.PUA.Tool.Linux.BtcMine.9999.9761.11740.elf
File opened for reading	/sys/class/drm/card1/device/uevent	SecuriteInfo.com.PUA.Tool.Linux.BtcMine.9999.9761.11740.elf
File opened for reading	/sys/class/drm/card1/device/vendor	SecuriteInfo.com.PUA.Tool.Linux.BtcMine.9999.9761.11740.elf

/tmp/SecuriteInfo.com.PUA.Tool.Linux.BtcMine.9999.9761.11740.elf
/tmp/SecuriteInfo.com.PUA.Tool.Linux.BtcMine.9999.9761.11740.elf
1⤵
- Enumerates kernel/hardware configuration
PID:2480

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact