General
-
Target
na.elf
-
Size
418KB
-
Sample
250222-vdf78atlgv
-
MD5
a1cf0d0af91c600326a5f868139335a9
-
SHA1
9e194e853dc677b55d702975ec5980ade16bf966
-
SHA256
75e59299c3f0493f842b27a1cdf6258cdd8ccd7577e8fa13361dbc20edb942c5
-
SHA512
869ab147e1e54e2df3e84bafad3e192e6ab5f1e235ccd9e716be2f13572ea69d30f19c325d2b78584b911c190bb63fc01a5039eda136c4965079809e7a41c9bb
-
SSDEEP
12288:6QIkwT+V+46MTuxN+qpMBUH5kAAxwWVtBeSH:W4/y+qaBUZJAdVtD
Behavioral task
behavioral1
Sample
na.elf
Resource
ubuntu1804-amd64-20240611-en
Malware Config
Targets
-
-
Target
na.elf
-
Size
418KB
-
MD5
a1cf0d0af91c600326a5f868139335a9
-
SHA1
9e194e853dc677b55d702975ec5980ade16bf966
-
SHA256
75e59299c3f0493f842b27a1cdf6258cdd8ccd7577e8fa13361dbc20edb942c5
-
SHA512
869ab147e1e54e2df3e84bafad3e192e6ab5f1e235ccd9e716be2f13572ea69d30f19c325d2b78584b911c190bb63fc01a5039eda136c4965079809e7a41c9bb
-
SSDEEP
12288:6QIkwT+V+46MTuxN+qpMBUH5kAAxwWVtBeSH:W4/y+qaBUZJAdVtD
-
Prometei_elf family
-
Deletes itself
-
Modifies hosts file
Adds to hosts file used for mapping hosts to IP addresses.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
-
Write file to user bin folder
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1XDG Autostart Entries
1Create or Modify System Process
1Systemd Service
1