General
-
Target
95a7a0c34a95baa5d00c114e86d26bcaa8b622b79b4665ec3af1962558cf5bde.elf
-
Size
418KB
-
Sample
250221-eagrkssmer
-
MD5
55ad32f7c8c3854f83dbfbf3d0030099
-
SHA1
d20e227c4cd1c6a221cc06e553c22fe6c94e9624
-
SHA256
95a7a0c34a95baa5d00c114e86d26bcaa8b622b79b4665ec3af1962558cf5bde
-
SHA512
aae4861aa5708b7427fb33d77a020ee4062aab9d5f70556b76676e124522976ae8b75d1d267da7f4eae0ef2422c0359b0d3a1c3ca0c477fea8a6501c3c25520d
-
SSDEEP
12288:6QIkwT+V+46MTuxN+qpMBUH5kAAxwWVtBeSk:W4/y+qaBUZJAdVtY
Behavioral task
behavioral1
Sample
95a7a0c34a95baa5d00c114e86d26bcaa8b622b79b4665ec3af1962558cf5bde.elf
Resource
ubuntu2404-amd64-20240523-en
Malware Config
Targets
-
-
Target
95a7a0c34a95baa5d00c114e86d26bcaa8b622b79b4665ec3af1962558cf5bde.elf
-
Size
418KB
-
MD5
55ad32f7c8c3854f83dbfbf3d0030099
-
SHA1
d20e227c4cd1c6a221cc06e553c22fe6c94e9624
-
SHA256
95a7a0c34a95baa5d00c114e86d26bcaa8b622b79b4665ec3af1962558cf5bde
-
SHA512
aae4861aa5708b7427fb33d77a020ee4062aab9d5f70556b76676e124522976ae8b75d1d267da7f4eae0ef2422c0359b0d3a1c3ca0c477fea8a6501c3c25520d
-
SSDEEP
12288:6QIkwT+V+46MTuxN+qpMBUH5kAAxwWVtBeSk:W4/y+qaBUZJAdVtY
-
Prometei_elf family
-
Deletes itself
-
Modifies hosts file
Adds to hosts file used for mapping hosts to IP addresses.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
-
Write file to user bin folder
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1XDG Autostart Entries
1Create or Modify System Process
1Systemd Service
1