Overview

overview

10

Static

static

10

c721189a2b...5518bc

linux_amd64

9

Analysis

  • max time kernel
    0s
  • max time network
    152s
  • platform
    linux_amd64
  • resource
    ubuntu-amd64
  • submitted
    13-04-2021 19:08

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c721189a2b89cd279e9a033c93b8b5017dc165cba89eff5b8e1b5866195518bc

  • Size

    764KB

  • MD5

    7d2595904aa6feb46b3e8f3262963042

  • SHA1

    32f485eece997ee331809e98495641f2bddf8b3f

  • SHA256

    c721189a2b89cd279e9a033c93b8b5017dc165cba89eff5b8e1b5866195518bc

  • SHA512

    77b36c4a46ae236b0e0bf5b839239b742e437d9d1990408165be0096defd6562976a0c4158fd2c9cd61287b785ecb178864ca379437e1304d6664593ca1115c5

Score
9/10
persistence

Malware Config

Signatures

  • Writes file to system bin folder 1 TTPs 2 IoCs
  • Creates/modifies Cron job 1 TTPs 1 IoCs

    Cron allows running tasks on a schedule, and is commonly used for malware persistence.

    persistence
  • Write file to user bin folder 1 TTPs 5 IoCs
  • Looks up external IP address via web service 2 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Reads runtime system information 64 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • ./c721189a2b89cd279e9a033c93b8b5017dc165cba89eff5b8e1b5866195518bc
    ./c721189a2b89cd279e9a033c93b8b5017dc165cba89eff5b8e1b5866195518bc
    1⤵
    • Writes file to system bin folder
    • Creates/modifies Cron job
    • Write file to user bin folder
    • Reads runtime system information
    PID:562

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads