Overview

overview

7

Static

static

1

73838d160e...a5.elf

ubuntu-18.04-amd64

7

Resubmissions

26/06/2026, 12:19

260626-phgrnabs8v7

19/07/2023, 06:36

230719-hcxglagc577

Sharing

Copy URL Twitter E-mail

General

  • Target
    73838d160eb7a23dfc8def07e8db1fa5.elf
  • Size 29KB
  • Sample260626-phgrnabs8v
  • SHA256 601a2ff4a7244ed41dda1c1fc71b10d3cfefa34e2ef8ba71598f41f73c031443
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
defense_evasiondiscoverylinuxprivilege_escalation

Malware Config

Targets

    • Target
      73838d160eb7a23dfc8def07e8db1fa5.elf
    • Size 29KB
    • SHA256 601a2ff4a7244ed41dda1c1fc71b10d3cfefa34e2ef8ba71598f41f73c031443
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    defense_evasiondiscoveryprivilege_escalation

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

      defense_evasion

    • Deletes itself

    • Abuse Elevation Control Mechanism: Sudo and Sudo Caching

      Abuse sudo or cached sudo credentials to execute code.

      privilege_escalationdefense_evasion

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks