mrblack | 119da99cd938fb3eeaa4c6e824ebaa9efb36abc66aa04ab60efb7f63350018eb | Triage

Sharing

General

Target

2939aadefa42ec7ad1c03d0c6f73b9cb
Size

1.2MB
Sample

211015-v8vzvsbhhj
MD5

2939aadefa42ec7ad1c03d0c6f73b9cb
SHA1

73172c7388b4392f5ca77178a00baa50e3df9785
SHA256

119da99cd938fb3eeaa4c6e824ebaa9efb36abc66aa04ab60efb7f63350018eb
SHA512

939f8458854cfbdc32d7954747c95ea7a2341fda7669840e9123e18662cd95fc63f010f2a017becc51f5b817811fb7dc041597031f0d8d9a9a5c6cc28b5e3d67

Score

10^/10

mrblack linux suricata

Malware Config

Targets

- Target
  
  2939aadefa42ec7ad1c03d0c6f73b9cb
- Size
  
  1.2MB
- MD5
  
  2939aadefa42ec7ad1c03d0c6f73b9cb
- SHA1
  
  73172c7388b4392f5ca77178a00baa50e3df9785
- SHA256
  
  119da99cd938fb3eeaa4c6e824ebaa9efb36abc66aa04ab60efb7f63350018eb
- SHA512
  
  939f8458854cfbdc32d7954747c95ea7a2341fda7669840e9123e18662cd95fc63f010f2a017becc51f5b817811fb7dc041597031f0d8d9a9a5c6cc28b5e3d67
Score

10^/10

suricata
- suricata: ET MALWARE Linux/BillGates Checkin Response
  suricata: ET MALWARE Linux/BillGates Checkin Response
  suricata
- Writes file to system bin folder
- Write file to user bin folder
- Reads runtime system information
  Reads data from /proc virtual filesystem.
- Writes file to tmp directory
  Malware often drops required files in the /tmp directory.
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hijack Execution Flow

Privilege Escalation

Hijack Execution Flow

Defense Evasion

Hijack Execution Flow

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3