Overview

overview

8

Static

static

8

81a9af3846...65f7f2

ubuntu-18.04-amd64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    81a9af3846bad3a1107164ff7cf0a08e020b31a3b32fd17866e17d4c1565f7f2
  • Size 13KB
  • Sample260910-leqnlsan4t
  • SHA256 81a9af3846bad3a1107164ff7cf0a08e020b31a3b32fd17866e17d4c1565f7f2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
hacktoolprivilege_escalationuta0533

Malware Config

Signatures

  • Privilege escalation tool: rootrun 1 IoCs

    Rootrun is a post-exploitation persistence tool used by UTA0533 against SonicWall SMA1000 VPN appliances. It is a setuid binary that elevates arbitrary commands to root without authentication.

    hacktoolprivilege_escalationuta0533

File Explorer

  • 81a9af3846bad3a1107164ff7cf0a08e020b31a3b32fd17866e17d4c1565f7f2
    .elf 13KB

81a9af3846bad3a1107164ff7cf0a08e020b31a3b32fd17866e17d4c1565f7f2

  • SHA256 81a9af3846bad3a1107164ff7cf0a08e020b31a3b32fd17866e17d4c1565f7f2
  • MD5 SHA1 SHA512 SSDEEP TLSH
linuxx64

  • Privilege escalation tool: rootrun

    Rootrun is a post-exploitation persistence tool used by UTA0533 against SonicWall SMA1000 VPN appliances. It is a setuid binary that elevates arbitrary commands to root without authentication.

    hacktoolprivilege_escalationuta0533