a262c2a7c581c95058ddfd0bcd30c20e856e036d5170f3c625d76e221db6d882 | Triage

Sharing

General

Target

a262c2a7c581c95058ddfd0bcd30c20e856e036d5170f3c625d76e221db6d882.elf
Size

64KB
Sample

241216-c1xvda1nar
MD5

515d44449575fb5f6e1cc10698c09189
SHA1

a27023ffcc67f3ffe6a80f3d8a4b1cca886d363d
SHA256

a262c2a7c581c95058ddfd0bcd30c20e856e036d5170f3c625d76e221db6d882
SHA512

491166e8bc8858c6b83283179e31e12501d19b2c0c80d49a11e5f6b3a6ad5de3b6b66178c91aacbb109e51bfe3719c98e5b0d8f8f8f6db4112c00de04e9b0cd6
SSDEEP

768:JD3UKOqcPkfKmL0XSodeE/fg7BWo0vjwZ2nvP3NtA+Th8HRolbzF12LDm3oRyXsg:FkbkiC4J3n8BWDN3ZSS1uyXskmXsU

Score

7^/10

discovery evasion linux

Malware Config

Targets

- Target
  
  a262c2a7c581c95058ddfd0bcd30c20e856e036d5170f3c625d76e221db6d882.elf
- Size
  
  64KB
- MD5
  
  515d44449575fb5f6e1cc10698c09189
- SHA1
  
  a27023ffcc67f3ffe6a80f3d8a4b1cca886d363d
- SHA256
  
  a262c2a7c581c95058ddfd0bcd30c20e856e036d5170f3c625d76e221db6d882
- SHA512
  
  491166e8bc8858c6b83283179e31e12501d19b2c0c80d49a11e5f6b3a6ad5de3b6b66178c91aacbb109e51bfe3719c98e5b0d8f8f8f6db4112c00de04e9b0cd6
- SSDEEP
  
  768:JD3UKOqcPkfKmL0XSodeE/fg7BWo0vjwZ2nvP3NtA+Th8HRolbzF12LDm3oRyXsg:FkbkiC4J3n8BWDN3ZSS1uyXskmXsU
Score

7^/10

discovery evasion
- Deletes itself
- Unexpected DNS network traffic destination
  Network traffic to other servers than the configured DNS servers was detected on the DNS port.
- Reads MAC address of network interface
  Fetches the MAC address of active network interfaces. May be used to detect known values for hypervisors.
  evasion discovery
- Reads network interface configuration
  Fetches information about one or more active network interfaces.
  discovery
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Network Configuration Discovery

Internet Connection Discovery

Wi-Fi Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion