mrblack | ca22002822b27562971b1b12bfd61f2f670554ebdb0907270fda4a65f7fd2eed | Triage

Sharing

General

Target

ca22002822b27562971b1b12bfd61f2f670554ebdb0907270fda4a65f7fd2eed
Size

1.2MB
Sample

220218-g7wccacedm
MD5

80d0cac0cd6be8010819fdcd7ac4af46
SHA1

adb2208a2016c6686c52d440f518098b4cbe3846
SHA256

ca22002822b27562971b1b12bfd61f2f670554ebdb0907270fda4a65f7fd2eed
SHA512

d0f1da32dd1f70ce3f918230c39c3d7a6210998f0a3ea0262805611156e3d37e8af237d14e3bf19eba0d7ea5b154621880fe3eadaea87bfc6e6337c6a5294a48

Score

10^/10

mrblack linux

Malware Config

Targets

- Target
  
  ca22002822b27562971b1b12bfd61f2f670554ebdb0907270fda4a65f7fd2eed
- Size
  
  1.2MB
- MD5
  
  80d0cac0cd6be8010819fdcd7ac4af46
- SHA1
  
  adb2208a2016c6686c52d440f518098b4cbe3846
- SHA256
  
  ca22002822b27562971b1b12bfd61f2f670554ebdb0907270fda4a65f7fd2eed
- SHA512
  
  d0f1da32dd1f70ce3f918230c39c3d7a6210998f0a3ea0262805611156e3d37e8af237d14e3bf19eba0d7ea5b154621880fe3eadaea87bfc6e6337c6a5294a48
Score

7^/10
- Write file to user bin folder
- Reads runtime system information
  Reads data from /proc virtual filesystem.
- Writes file to tmp directory
  Malware often drops required files in the /tmp directory.
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hijack Execution Flow

Privilege Escalation

Hijack Execution Flow

Defense Evasion

Hijack Execution Flow

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1