Analysis

  • max time kernel
    131s
  • max time network
    137s
  • platform
    ubuntu-22.04_amd64
  • resource
    ubuntu2204-amd64-20240611-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2204-amd64-20240611-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
  • submitted
    23-01-2025 02:10

General

  • Target

    19b3668761376a902bed2ff27aac7107f14e9f76eae85f06719c25c7777c85e9.elf

  • Size

    156KB

  • MD5

    eebf4b2b2defd1f78281d591461eefdc

  • SHA1

    9bbadec29e767d24c22230ec64bc64369c21ca25

  • SHA256

    19b3668761376a902bed2ff27aac7107f14e9f76eae85f06719c25c7777c85e9

  • SHA512

    7b92b6cb0a39694a8e5221bbe7e521494e2aaa2e116a7c7868a37b332ea29c92fcbdb256b984fa85b30609d48fae4058f4a140b84c9ed4e2454d3aebe1ff0d74

  • SSDEEP

    3072:nMm4EPBMqOlPhX6qE2efpchx0XXzbD9jC4CU/ek21iZkn9rkKUb:nMm4EP6qOlPhZeywIVi7E9r9M

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Traces itself 1 IoCs

    Traces itself to prevent debugging attempts

  • Changes its process name 1 IoCs
  • Writes file to tmp directory 9 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/19b3668761376a902bed2ff27aac7107f14e9f76eae85f06719c25c7777c85e9.elf
    /tmp/19b3668761376a902bed2ff27aac7107f14e9f76eae85f06719c25c7777c85e9.elf
    1⤵
    • Deletes itself
    • Traces itself
    • Changes its process name
    • Writes file to tmp directory
    PID:1575

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads