Overview

overview

10

Static

static

10

dbus_socket.elf

ubuntu-18.04-amd64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    dbus_socket.elf
  • Size 23KB
  • Sample260425-119qyact2m
  • SHA256 de472ed37e33b79e1aa37e67a680ee3a9d74628438c209543a06e916a0a86fba
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
bpfdoorbackdoordefense_evasiondiscoverylinux

Malware Config

Targets

    • Target
      dbus_socket.elf
    • Size 23KB
    • SHA256 de472ed37e33b79e1aa37e67a680ee3a9d74628438c209543a06e916a0a86fba
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    backdoordefense_evasiondiscoverybpfdoor

    • BPFDoor payload

    • Family: BPFDoor

      BPFDoor is an evasive Linux backdoor attributed to a Chinese threat actor called Red Menshen.

      backdoorbpfdoor

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

      defense_evasion
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks