mrblack | 6cfbe997d6be386d879f4221237877ee194b91fc75320edc1c0b58d7af824614 | Triage

Sharing

General

Target

9eb8c2ce21be0b6f778806b9875f1368
Size

1.2MB
Sample

210903-s9chssgefk
MD5

9eb8c2ce21be0b6f778806b9875f1368
SHA1

11f84fdb6933d410f01b3c17e90e82cf6ecddbb5
SHA256

6cfbe997d6be386d879f4221237877ee194b91fc75320edc1c0b58d7af824614
SHA512

ffc60247f08d188c00f048eae9773b590e6a634659c48b609e97a987e877bb2d1a5ed759b992a6887754d32b873600fda3b13b89bc3e368cbfe5ccf42b8730b3

Score

10^/10

mrblack linux

Malware Config

Targets

- Target
  
  9eb8c2ce21be0b6f778806b9875f1368
- Size
  
  1.2MB
- MD5
  
  9eb8c2ce21be0b6f778806b9875f1368
- SHA1
  
  11f84fdb6933d410f01b3c17e90e82cf6ecddbb5
- SHA256
  
  6cfbe997d6be386d879f4221237877ee194b91fc75320edc1c0b58d7af824614
- SHA512
  
  ffc60247f08d188c00f048eae9773b590e6a634659c48b609e97a987e877bb2d1a5ed759b992a6887754d32b873600fda3b13b89bc3e368cbfe5ccf42b8730b3
Score

9^/10
- Writes file to system bin folder
- Write file to user bin folder
- Reads runtime system information
  Reads data from /proc virtual filesystem.
- Writes file to tmp directory
  Malware often drops required files in the /tmp directory.
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hijack Execution Flow

Privilege Escalation

Hijack Execution Flow

Defense Evasion

Hijack Execution Flow

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3