General

  • Target

    Linux-syn25000

  • Size

    1.2MB

  • Sample

    210211-nqlwpn7pkn

  • MD5

    39d2cd9f3bf90012d4568b2105645e64

  • SHA1

    0e5bbc7fa5767ad76fd943c4383877916127d54e

  • SHA256

    b68b186544c9a291b8f8e7bb8312798dca4da67366e96441ccc196cc16042d97

  • SHA512

    33fc11e8f6327ace8345d68b64846ca06f2a7af3dc923cd92d37bea06f2a08f527acf7f26328907ab99bea27a90162d0bf4413889fe5b10c724dd073a4eac31b

Score
10/10

Malware Config

Targets

    • Target

      Linux-syn25000

    • Size

      1.2MB

    • MD5

      39d2cd9f3bf90012d4568b2105645e64

    • SHA1

      0e5bbc7fa5767ad76fd943c4383877916127d54e

    • SHA256

      b68b186544c9a291b8f8e7bb8312798dca4da67366e96441ccc196cc16042d97

    • SHA512

      33fc11e8f6327ace8345d68b64846ca06f2a7af3dc923cd92d37bea06f2a08f527acf7f26328907ab99bea27a90162d0bf4413889fe5b10c724dd073a4eac31b

    Score
    9/10
    • Writes file to system bin folder

    • Write file to user bin folder

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

    • Writes file to tmp directory

      Malware often drops required files in the /tmp directory.

MITRE ATT&CK Enterprise v6

Tasks