Analysis

  • max time kernel
    129s
  • max time network
    145s
  • platform
    ubuntu-22.04_amd64
  • resource
    ubuntu2204-amd64-20240611-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2204-amd64-20240611-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
  • submitted
    29-01-2025 03:10

General

  • Target

    a72cf98c991b5ebac0712edc76da613e6b173bd425c56a0ce4adc031409ec668.elf

  • Size

    5KB

  • MD5

    58b3d918552710b5c0db5f1307e7e9c3

  • SHA1

    8914f0983ca1b48c378b3916fd8a669951d33978

  • SHA256

    a72cf98c991b5ebac0712edc76da613e6b173bd425c56a0ce4adc031409ec668

  • SHA512

    16acc3a014642c6bce6534d2c7d89bdb02528832fa00235b6c2481eb2a9333b4eefba787fd45a1ba0e429be5339bb6e4d04f1c32e6d7e35ebf04d843c8ef306c

  • SSDEEP

    96:GdzIwUugbVr/J9bisiVV3M1LSBpeeLWv9m+iQeBkm4LiDHdCisY4v/A:GdsCgbVr/XiscV3jlyv9m+iQUuLiD9Ca

Malware Config

Extracted

Family

systembc

C2

79.110.62.222

Signatures

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

  • Systembc family
  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/a72cf98c991b5ebac0712edc76da613e6b173bd425c56a0ce4adc031409ec668.elf
    /tmp/a72cf98c991b5ebac0712edc76da613e6b173bd425c56a0ce4adc031409ec668.elf
    1⤵
    • Reads runtime system information
    PID:1565

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads