Analysis

  • max time kernel
    130s
  • max time network
    136s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20240611-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20240611-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    19-12-2024 20:15

General

  • Target

    wiewa64.elf

  • Size

    164KB

  • MD5

    54b9ab4ddfac7f9e5775ee57d8007fa5

  • SHA1

    89cae32bcd35b0738b12c7cbdb9ee996d87bcd7d

  • SHA256

    dca359aa16005da260dac76d5baec9360796211eff6e31341b5112dbc91e7fca

  • SHA512

    ab0d1a71bc59a219d0202be66872a4148a8794dfdd84e0ff4a8e4c4942d7108df1623bf38f2d2a8e6bb7dfe540b4dce09aba217117b91e1888049913ee1e8f38

  • SSDEEP

    3072:/+DuGSfrSgwTt4n3JzYQzdPljfEom6xaERVyVqCiZYSY/NCHVoroJizBj:/+CGSfrSgwTt45zYQs/1iZLVAoJizB

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Changes its process name 1 IoCs
  • Reads runtime system information 64 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/wiewa64.elf
    /tmp/wiewa64.elf
    1⤵
    • Deletes itself
    • Changes its process name
    • Reads runtime system information
    PID:1507

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads