General
- Target pty4
- Size 43KB
- Sample220309-v8xtfseafl
- SHA256 177de2e81e59660dbbcb6c5506d22ab5ab5a5e2fe7b9d44bb83d8c2431863f23
- MD5 9a3ec09ab3ac132d5089e293e22078ff
- SHA1 a9791ba664dff0e29020532152b5573649af1c71
- SHA512 c5dc5838bf3d218f5f2557cbc16f67aeb174751f6df91b0848cd4d8164a82c2a423eec74f97a063b9aca25f3476677191ee34c437c0db1680c806d2071306381
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
pty4
Resource
ubuntu1804-amd64-en-20211208
0 signatures
0 seconds
Malware Config
Targets
-
- Target pty4
- Size 43KB
- SHA256 177de2e81e59660dbbcb6c5506d22ab5ab5a5e2fe7b9d44bb83d8c2431863f23
- MD5 9a3ec09ab3ac132d5089e293e22078ff
- SHA1 a9791ba664dff0e29020532152b5573649af1c71
- SHA512 c5dc5838bf3d218f5f2557cbc16f67aeb174751f6df91b0848cd4d8164a82c2a423eec74f97a063b9aca25f3476677191ee34c437c0db1680c806d2071306381
- MD5 SHA1 SHA512
Score10/10-
suricata: ET MALWARE ELF/Muhstik Botnet CnC Activity
suricata: ET MALWARE ELF/Muhstik Botnet CnC Activity
-
Reads runtime system information
Reads data from /proc virtual filesystem.
-
Writes file to tmp directory
Malware often drops required files in the /tmp directory.