ef22559baf89f4bc9af7222a687edf9e91b8e69fe743ae25559f5c6b61d9362d

Analysis

max time kernel
149s
max time network
10s
platform
debian-9_mipsel
resource
debian9-mipsel-20240418-en
resource tags

arch:mipselimage:debian9-mipsel-20240418-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
19/02/2025, 06:12

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ef22559baf89f4bc9af7222a687edf9e91b8e69fe743ae25559f5c6b61d9362d.elf
Size

150KB
MD5

d27ba0aebc1887fb23c43187a1eb3d95
SHA1

aab111ba9f35ee1fbca34f808a05a7c31252c252
SHA256

ef22559baf89f4bc9af7222a687edf9e91b8e69fe743ae25559f5c6b61d9362d
SHA512

c2eea705d332417b7a20d3451a4077dd10bd05d1304296b9ccfdd5c137e15d584961d9b992d82e5d6aaa0fd4c90b4e2d202d6ca855fe4766b9031d28cd95d0a3
SSDEEP

3072:7qRHyUF4+esvApryQv03URxuZq+1uPNd5R:7qRHy5+eIApyLURxuZq+1uPNd5R

Score

7^/10

Malware Config

Signatures

Writes DNS configuration 1 TTPs 1 IoCs

Writes data to DNS resolver config file.

Adversary-in-the-Middle

T1557

description	ioc	Process
File opened for modification	/etc/resolv.conf	ef22559baf89f4bc9af7222a687edf9e91b8e69fe743ae25559f5c6b61d9362d.elf

Changes its process name 1 IoCs

description	pid	Process
Changes the process name, possibly in an attempt to hide itself	727	ef22559baf89f4bc9af7222a687edf9e91b8e69fe743ae25559f5c6b61d9362d.elf

/tmp/ef22559baf89f4bc9af7222a687edf9e91b8e69fe743ae25559f5c6b61d9362d.elf
/tmp/ef22559baf89f4bc9af7222a687edf9e91b8e69fe743ae25559f5c6b61d9362d.elf
1⤵
- Writes DNS configuration
- Changes its process name
PID:727

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Adversary-in-the-Middle

T1557

Discovery

Lateral Movement

Collection

Adversary-in-the-Middle

T1557

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads