Analysis
-
max time kernel
131s -
max time network
150s -
platform
ubuntu-22.04_amd64 -
resource
ubuntu2204-amd64-20250307-en -
resource tags
-
submitted
08/03/2025, 13:48
General
-
Target
c247239e9373395f8f485f350d1d38c78656d72c6dcf6bf61551fb32100aad0e.elf
-
Size
110KB
-
MD5
bf3dabf8d477d699f0d1795888d3d6ef
-
SHA1
a6bbecf6eb233b57186b888ed9a48b0ffb71ba1f
-
SHA256
c247239e9373395f8f485f350d1d38c78656d72c6dcf6bf61551fb32100aad0e
-
SHA512
f258c55bf2e000e5bf8f3ec95f5b0225678a9b07c7f9030984df0a97896f03fbe12f3668006aab12bd13513a0cb80f452695d62c02249811bf726a10cb0e9aaf
-
SSDEEP
3072:N1V/PY7b/ZBjOBQOARytwTO5aWmOm+09V:vV/PmbhBjOBQiJbm3T
Score
9/10
Malware Config
Signatures
-
Contacts a large (3074) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Deletes itself 1 IoCs
-
Modifies Watchdog functionality 1 TTPs 1 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Writes file to system bin folder 2 IoCs
-
Changes its process name 1 IoCs