General

  • Target

    crp_linux_arm

  • Size

    4.5MB

  • Sample

    220425-1tbwbsebg8

  • MD5

    7dfed656ca6a4a14a4e40e2865ba7697

  • SHA1

    955db50f05fbf2b96c0e0f0ca860f1d7b67bf2b0

  • SHA256

    551e03e17d1df9bd5b712bec7763578c01e7bffe9b93db246e36ec0a174f7467

  • SHA512

    4860ce88b1105e9ec9171ed84526f9a60a844c8a5ef93d6435e9d08b638829ae868b8a56e9b62069726e8311fa63c72ec81998841e8ea23b5a08c9e8290df8c6

Score
10/10

Malware Config

Targets

    • Target

      crp_linux_arm

    • Size

      4.5MB

    • MD5

      7dfed656ca6a4a14a4e40e2865ba7697

    • SHA1

      955db50f05fbf2b96c0e0f0ca860f1d7b67bf2b0

    • SHA256

      551e03e17d1df9bd5b712bec7763578c01e7bffe9b93db246e36ec0a174f7467

    • SHA512

      4860ce88b1105e9ec9171ed84526f9a60a844c8a5ef93d6435e9d08b638829ae868b8a56e9b62069726e8311fa63c72ec81998841e8ea23b5a08c9e8290df8c6

    Score
    7/10
    • Write file to user bin folder

    • Enumerates kernel/hardware configuration

      Reads contents of /sys virtual filesystem to enumerate system information.

    • Writes file to tmp directory

      Malware often drops required files in the /tmp directory.

MITRE ATT&CK Enterprise v6

Tasks