ebf742b55a85955424ecc3864ce3248b5ce63263d5237e18490a12c723ad6eb2

Analysis

max time kernel
125s
max time network
128s
platform
ubuntu-22.04_amd64
resource
ubuntu2204-amd64-20240611-en
resource tags

arch:amd64arch:i386image:ubuntu2204-amd64-20240611-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
submitted
19/02/2025, 05:59

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ebf742b55a85955424ecc3864ce3248b5ce63263d5237e18490a12c723ad6eb2.elf
Size

97KB
MD5

c16c1a8c7cc13ad721eb2e399958ca6a
SHA1

12b0550a80ce2a65ef82ade7b84ae27df56b7b66
SHA256

ebf742b55a85955424ecc3864ce3248b5ce63263d5237e18490a12c723ad6eb2
SHA512

267404dcdf4949ff4d006b336508a380975c67bfda5af24dcfea1f971a4994670b28c7b607abd289112a256a2e5153d8c1afb117d8c980162fb60dbab16a43b2
SSDEEP

3072:VhTXBNU2Uh917j8g8jHzCBCUAW0fx9fmDTH2Iinf0OzTyoQQub:xNxu917j8g8jGmW89AH2Iinf0OzTyoQ7

Score

7^/10

Malware Config

Signatures

Writes DNS configuration 1 TTPs 1 IoCs

Writes data to DNS resolver config file.

Adversary-in-the-Middle

T1557

description	ioc
File opened for modification	/etc/resolv.conf

Changes its process name 1 IoCs

description	pid
Changes the process name, possibly in an attempt to hide itself	1577

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Adversary-in-the-Middle

T1557

Discovery

Lateral Movement

Collection

Adversary-in-the-Middle

T1557

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads