General

  • Target

    403015ed09154f18aacc97292337940c42d72e6e2b2f80c6d8d8c3e9e542d1a2

  • Size

    1.2MB

  • Sample

    220218-hgq6dabgg7

  • MD5

    99af35eda136ece53053a4ac0ffb5931

  • SHA1

    fea4b46f01ed73b0394dcd41293e45cf07f10920

  • SHA256

    403015ed09154f18aacc97292337940c42d72e6e2b2f80c6d8d8c3e9e542d1a2

  • SHA512

    7a321df39ce886a73e76b7bc92deb8b111b4bf26a9b96ab9b9f656d7c6d429c038594d6849205596f4c37a45c3a7f0dc0299203b9530528c4f0660b0b4ad8ccf

Score
10/10

Malware Config

Targets

    • Target

      403015ed09154f18aacc97292337940c42d72e6e2b2f80c6d8d8c3e9e542d1a2

    • Size

      1.2MB

    • MD5

      99af35eda136ece53053a4ac0ffb5931

    • SHA1

      fea4b46f01ed73b0394dcd41293e45cf07f10920

    • SHA256

      403015ed09154f18aacc97292337940c42d72e6e2b2f80c6d8d8c3e9e542d1a2

    • SHA512

      7a321df39ce886a73e76b7bc92deb8b111b4bf26a9b96ab9b9f656d7c6d429c038594d6849205596f4c37a45c3a7f0dc0299203b9530528c4f0660b0b4ad8ccf

    Score
    9/10
    • Writes file to system bin folder

    • Write file to user bin folder

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

    • Writes file to tmp directory

      Malware often drops required files in the /tmp directory.

MITRE ATT&CK Enterprise v6

Tasks