Analysis
-
max time kernel
0s -
max time network
285s -
platform
linux_amd64 -
resource
ubuntu-amd64 -
submitted
02-09-2021 16:16
General
-
Target
d4645d2c29505cf10d1b201826c777b62cbf9d752cb1008bef1192e0dd545a82
-
Size
2.0MB
-
MD5
8729ec8b771cfb0134740c564cd7e965
-
SHA1
d8de06e85d23afe38063f22ff0ef9cd597027122
-
SHA256
d4645d2c29505cf10d1b201826c777b62cbf9d752cb1008bef1192e0dd545a82
-
SHA512
1c049294744d906088327d332351da9739a561c1faf45e282e6afc9038c523abbd27a20619de947cf3782fcb76903a46f3a35258f0b80735b319319fbfc4bb5f
Score
9/10
Malware Config
Signatures
-
Deletes system logs 1 TTPs 6 IoCs
-
Modifies hosts file 1 IoCs
Adds to hosts file used for mapping hosts to IP addresses.
-
Writes DNS configuration 1 TTPs 1 IoCs
Writes data to DNS resolver config file.
-
Creates/modifies Cron job 1 TTPs 1 IoCs
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Reads CPU attributes 1 TTPs 1 IoCs
-
Writes file to tmp directory 3 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
./d4645d2c29505cf10d1b201826c777b62cbf9d752cb1008bef1192e0dd545a82./d4645d2c29505cf10d1b201826c777b62cbf9d752cb1008bef1192e0dd545a821⤵
- Writes file to tmp directory