Overview

overview

10

Static

static

10

jade.x86.elf

ubuntu-22.04-amd64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    jade.x86.elf

  • Size

    100KB

  • Sample

    240922-xvyvpstgra

  • MD5

    dcc3ccc1cc4d730f6a3bb70c0b410c69

  • SHA1

    cc3197c436356a1a99c0c4e136f8375d210fabfe

  • SHA256

    065207effd020d13cc68ad9160671a7c3f11de716a3b605c2225ba5a317f7552

  • SHA512

    7a48088d02c81901ed98cd32baf5f08a6fb13781487030be5ee866719fab922eaba83f99f7cbe891ecb3579e3d1df8c757a95113865cbe69b2b82cd2146a333d

  • SSDEEP

    1536:ehsPIb+AxMiPDXp16/dq0TXwle4VZpI49Sa0ZdkOgpamj3oXal7CFMI:eOS+AxMyDXm/dq0TXwl3VZTh05gwhoI

Score
10/10
echobotmiraidefense_evasiondiscoverylinux

Malware Config

Targets

    • Target

      jade.x86.elf

    • Size

      100KB

    • MD5

      dcc3ccc1cc4d730f6a3bb70c0b410c69

    • SHA1

      cc3197c436356a1a99c0c4e136f8375d210fabfe

    • SHA256

      065207effd020d13cc68ad9160671a7c3f11de716a3b605c2225ba5a317f7552

    • SHA512

      7a48088d02c81901ed98cd32baf5f08a6fb13781487030be5ee866719fab922eaba83f99f7cbe891ecb3579e3d1df8c757a95113865cbe69b2b82cd2146a333d

    • SSDEEP

      1536:ehsPIb+AxMiPDXp16/dq0TXwle4VZpI49Sa0ZdkOgpamj3oXal7CFMI:eOS+AxMyDXm/dq0TXwl3VZTh05gwhoI

    Score
    9/10
    defense_evasiondiscovery

    • Contacts a large (250324) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Enumerates active TCP sockets

      Gets active TCP sockets from /proc virtual filesystem.

      discovery

    • Enumerates running processes

      Discovers information about currently running processes on the system

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks