netfilter | d64f906376f21677d0585e93dae8b36248f94be7091b01fd1d4381916a326afe | Triage

Sharing

General

Target

d64f906376f21677d0585e93dae8b36248f94be7091b01fd1d4381916a326afe.bin
Size

113KB
Sample

210618-3wnsf3rf26
MD5

1c3db7002523e1acd621c90701c694ae
SHA1

aee092fd31772d33932a7a02dd2d73ede67f7db0
SHA256

d64f906376f21677d0585e93dae8b36248f94be7091b01fd1d4381916a326afe
SHA512

e94cd7fa788fa2f828dd40fe096b25655d7b8fe9fd948c5b53f6c30039ca0b9c309ebf8619c0de6988ef5efb4db0b0683c9ddc63ad200aa5e88b8f01a9294f1b

Score

10^/10

netfilter persistence rootkit

Malware Config

Targets

- Target
  
  d64f906376f21677d0585e93dae8b36248f94be7091b01fd1d4381916a326afe.bin
- Size
  
  113KB
- MD5
  
  1c3db7002523e1acd621c90701c694ae
- SHA1
  
  aee092fd31772d33932a7a02dd2d73ede67f7db0
- SHA256
  
  d64f906376f21677d0585e93dae8b36248f94be7091b01fd1d4381916a326afe
- SHA512
  
  e94cd7fa788fa2f828dd40fe096b25655d7b8fe9fd948c5b53f6c30039ca0b9c309ebf8619c0de6988ef5efb4db0b0683c9ddc63ad200aa5e88b8f01a9294f1b
Score

10^/10

netfilter persistence rootkit
- NetFilter
  NetFilter is a rootkit first seen in June 2021.
  rootkit netfilter
- Sets service image path in registry
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

netfilterpersistencerootkit

behavioral2

netfilterpersistencerootkit