Analysis

  • max time kernel
    113s
  • max time network
    144s
  • platform
    ubuntu-24.04_amd64
  • resource
    ubuntu2404-amd64-20240523-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
  • submitted
    13-11-2024 18:12

General

  • Target

    x-3.2-.ISIS.elf

  • Size

    84KB

  • MD5

    b5955adc8c122a81dcacb4a2e0f84f53

  • SHA1

    834b86d5bf259c5d440a76de38e5ec8b7632527a

  • SHA256

    24c941fb90bc3888d3fae29a707d27fe5961bca572ab6e337bbf4ca8fc2b3552

  • SHA512

    75f936c70c0f88a3b7220607f8ab89f2066a87cb644ea1ec82d1cf0e970b163ca2c372663b2cadc1261ccd8e2d1db055b1823863229edd6c6a16c4f75cea4e71

  • SSDEEP

    1536:sQmab6bXPm8VjWWHT0im5tu0uTShKW6GLdUF5MI5AtpgwcP6GHfV+mLI2VOYjXUd:Oab6bXPm8VjWWHT0B5thucnBUF5MI5d2

Score
7/10

Malware Config

Signatures

  • Unexpected DNS network traffic destination 1 IoCs

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

Processes

  • /tmp/x-3.2-.ISIS.elf
    /tmp/x-3.2-.ISIS.elf
    1⤵
      PID:2826

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads