General

  • Target

    e1b71400f50e1e8a099dc9311c317c57e42e2310d1e0002353d115c736b2b0a7.elf

  • Size

    68KB

  • Sample

    241120-d7fp4svlhq

  • MD5

    ec6e587f931b314683abe573d5d9bc2a

  • SHA1

    dd2a580e000eb5662b4fb4df5918e9779673bb90

  • SHA256

    e1b71400f50e1e8a099dc9311c317c57e42e2310d1e0002353d115c736b2b0a7

  • SHA512

    7136f3df2e70715ce57929d48ca1a96454855bf775d47073e2dc920a1a88807415306549d5aeb3278bd1e54f9c6ac47f0a25dae51c919733c8b638ee40b7335e

  • SSDEEP

    1536:zt+6I5jIykn/IUG+BHOQUhjNjDnc4SOs9WLCm0gSDzutUI:8BIykgUG+NOnnfzDt+m0gSPm3

Malware Config

Targets

    • Target

      e1b71400f50e1e8a099dc9311c317c57e42e2310d1e0002353d115c736b2b0a7.elf

    • Size

      68KB

    • MD5

      ec6e587f931b314683abe573d5d9bc2a

    • SHA1

      dd2a580e000eb5662b4fb4df5918e9779673bb90

    • SHA256

      e1b71400f50e1e8a099dc9311c317c57e42e2310d1e0002353d115c736b2b0a7

    • SHA512

      7136f3df2e70715ce57929d48ca1a96454855bf775d47073e2dc920a1a88807415306549d5aeb3278bd1e54f9c6ac47f0a25dae51c919733c8b638ee40b7335e

    • SSDEEP

      1536:zt+6I5jIykn/IUG+BHOQUhjNjDnc4SOs9WLCm0gSDzutUI:8BIykgUG+NOnnfzDt+m0gSPm3

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

    • Loads a kernel module

      Loads a Linux kernel module, potentially to achieve persistence

    • Creates/modifies Cron job

      Cron allows running tasks on a schedule, and is commonly used for malware persistence.

MITRE ATT&CK Enterprise v15

Tasks