mrblack | eeca533a472175b80747c836cb1dde26633102f72aa6245265f330c6a611894d | Triage

Sharing

General

Target

eeca533a472175b80747c836cb1dde26633102f72aa6245265f330c6a611894d
Size

1.2MB
Sample

220218-g5kg3acebl
MD5

8015d5a208ee25ee41d5bf17ab195ce5
SHA1

98b9759845f154baafd0ceb649c51666a8e6973e
SHA256

eeca533a472175b80747c836cb1dde26633102f72aa6245265f330c6a611894d
SHA512

698be70b3cb9afef2243461ce65cc5d3e4ab6ca8642a602b90d0a9ce518ea39508389778bb1e48050ebe58ce5efbbe185cb47aab8f57ca853ea7135d21b838b0

Score

10^/10

mrblack linux

Malware Config

Targets

- Target
  
  eeca533a472175b80747c836cb1dde26633102f72aa6245265f330c6a611894d
- Size
  
  1.2MB
- MD5
  
  8015d5a208ee25ee41d5bf17ab195ce5
- SHA1
  
  98b9759845f154baafd0ceb649c51666a8e6973e
- SHA256
  
  eeca533a472175b80747c836cb1dde26633102f72aa6245265f330c6a611894d
- SHA512
  
  698be70b3cb9afef2243461ce65cc5d3e4ab6ca8642a602b90d0a9ce518ea39508389778bb1e48050ebe58ce5efbbe185cb47aab8f57ca853ea7135d21b838b0
Score

7^/10
- Write file to user bin folder
- Reads runtime system information
  Reads data from /proc virtual filesystem.
- Writes file to tmp directory
  Malware often drops required files in the /tmp directory.
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hijack Execution Flow

Privilege Escalation

Hijack Execution Flow

Defense Evasion

Hijack Execution Flow

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1