Overview

overview

10

Static

static

10

bimbo-x86

ubuntu-24.04-amd64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bimbo-x86

  • Size

    41KB

  • Sample

    250328-phzbpsv1gv

  • MD5

    2bf5bd1011bb9e538cade75d148d9aa5

  • SHA1

    014886edf412f4a790a08aaf18cc4522a5935d8d

  • SHA256

    f975c4c55a4238ef389bf2f9b3c4ef6b0ae5e7feb078522b47024f12dc5c9384

  • SHA512

    62937c590496ff92ff2bba78c1f25e560bdfc8d714d186daa6967fccb2ce1e4c7e446c6b6b0f608fb6ac389f03c60d5612726fe5b15d47fe6d31a18168066ada

  • SSDEEP

    768:grSZQGftR0rfpuoPjArT5l5beVykNCvxyx+/Hw+6RKd2JaU0gUQ2PNRQ:grSZhftuUlaVyYCK+6RK0JaU0XQ2PP

Score
10/10
miraidiscoverylinuxrootkit

Malware Config

Targets

    • Target

      bimbo-x86

    • Size

      41KB

    • MD5

      2bf5bd1011bb9e538cade75d148d9aa5

    • SHA1

      014886edf412f4a790a08aaf18cc4522a5935d8d

    • SHA256

      f975c4c55a4238ef389bf2f9b3c4ef6b0ae5e7feb078522b47024f12dc5c9384

    • SHA512

      62937c590496ff92ff2bba78c1f25e560bdfc8d714d186daa6967fccb2ce1e4c7e446c6b6b0f608fb6ac389f03c60d5612726fe5b15d47fe6d31a18168066ada

    • SSDEEP

      768:grSZQGftR0rfpuoPjArT5l5beVykNCvxyx+/Hw+6RKd2JaU0gUQ2PNRQ:grSZhftuUlaVyYCK+6RK0JaU0XQ2PP

    Score
    9/10
    discoveryrootkit

    • Contacts a large (147090) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Loads a kernel module

      Loads a Linux kernel module, potentially to achieve persistence

      rootkit
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks