0980e871c6183463aa7c8d7738d42ef1ac4ba5f1ced96de2ef793620bd45abb2 | Triage

Sharing

General

Target

0980e871c6183463aa7c8d7738d42ef1ac4ba5f1ced96de2ef793620bd45abb2
Size

127KB
Sample

220219-cm9l1sfefj
MD5

6c20d4fc9a848ca84c58b28fffffbff3
SHA1

096c49292067652bb30a0bd5959be25aa6bb2f3e
SHA256

0980e871c6183463aa7c8d7738d42ef1ac4ba5f1ced96de2ef793620bd45abb2
SHA512

3bf4ec6f201fa05bfc8249ed10e88bbe0293e1102bf79be6d553b6549612361f7124dc9f267f0eb3ae26657d9040aeb64ad14b58f49318719a96954ef230f16a

Score

7^/10

linux

Malware Config

Targets

- Target
  
  0980e871c6183463aa7c8d7738d42ef1ac4ba5f1ced96de2ef793620bd45abb2
- Size
  
  127KB
- MD5
  
  6c20d4fc9a848ca84c58b28fffffbff3
- SHA1
  
  096c49292067652bb30a0bd5959be25aa6bb2f3e
- SHA256
  
  0980e871c6183463aa7c8d7738d42ef1ac4ba5f1ced96de2ef793620bd45abb2
- SHA512
  
  3bf4ec6f201fa05bfc8249ed10e88bbe0293e1102bf79be6d553b6549612361f7124dc9f267f0eb3ae26657d9040aeb64ad14b58f49318719a96954ef230f16a
Score

7^/10
- Reads system routing table
  Gets active network interfaces from /proc virtual filesystem.
- Reads system network configuration
  Uses contents of /proc filesystem to enumerate network settings.
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1