8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89

General

Target

8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
Size

154KB
MD5

798a06eeac9f295ad3b307bbc01af5ef
SHA1

bdede057907147b420918d4247e1c9724937b91e
SHA256

8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89
SHA512

07da063492492386deb063c0a61bda0c87104ac12625e4f1201a19d948d04f07f3bb1b59b50912f17d00ead90fbe000059420ce23bac9ae19e44664223e140d2
SSDEEP

1536:e+zqnkngFHoIr+L9sr9MWcM5F22RjA7Tr4VLiNETDHjcF9U9aO10lAPP+UQldiUJ:e+zOOLUM2JRjw4w6fjcFCGSX+H4wL3

Score

7^/10

discovery

Malware Config

Signatures

Deletes itself 1 IoCs

Processes:

8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf

pid process

648 8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
Enumerates running processes
Discovers information about currently running processes on the system

pid	process
648	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf

Changes its process name 1 IoCs

Processes:

8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf

description	ioc	pid	process
Changes the process name, possibly in an attempt to hide itself	httpd	647	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf

Reads runtime system information 56 IoCs

Reads data from /proc virtual filesystem.

discovery

Processes:

8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf

description	ioc	process
File opened for reading	/proc/105/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/140/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/97/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/267/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/277/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/309/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/11/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/13/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/17/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/107/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/152/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/301/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/7/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/18/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/43/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/460/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/8/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/15/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/22/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/23/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/150/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/16/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/42/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/14/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/108/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/269/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/275/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/5/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/20/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/26/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/41/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/411/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/75/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/138/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/165/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/278/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/280/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/21/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/24/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/314/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/2/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/6/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/29/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/300/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/10/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/19/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/147/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/415/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/3/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/4/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/27/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/28/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/9/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/12/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/25/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
File opened for reading	/proc/217/cmdline	8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf

/tmp/8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
/tmp/8dfd875aa504b3b7b67691ad0cf2ab2f96d30877e9b1eb998c0fda67d197cb89.elf
1⤵
- Deletes itself
- Changes its process name
- Reads runtime system information
PID:647

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads