Suspect ELF/Linux Executables

[Maikuolan]

Hi,

I've got a small handful of ELF/Linux executables that someone has sent to me to take a look at that they suspect to be malicious, but, I don't currently have access to a Linux machine or virtual environment to be able to actually run them to confirm one way or the other as to whether they're malicious or benign.

Most online sandboxes available that I'm aware of are focused towards Windows/PE executables (Malwr, Hybrid Analysis, Anubis, etc), and so, won't be of any use for where ELF files are concerned.

I've scanned them all using Virus Total, and they're all FUD, but, searching for information about them on Google (such as via filename, MD5/SHA1/SHA256 hash and etc) brings up almost zero information and isn't particularly helpful.

Any suggestions on how to proceed?

Thanks.

Kind Regards,
Caleb M / Maikuolan.

 

[LabZero]

@Maikuolan

Perhaps this answer will arrive you late but I found this online service a few days ago.

detux - Multiplatform Linux Sandbox Analyze linux malwares on x86, x86-64, ARM, MIPS and MIPSEL cpu

 

[Maikuolan]

Cheers, @Klipsh!

This is exactly the sort of thing I was looking for. Thanks for sharing! Much appreciated.