Overview

overview

10

Static

static

10

05da06df8d...9194ef

linux_amd64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    05da06df8d0d14b6e5779466a701d98aac5850e7f53d1106b2f4ad61a99194ef

  • Size

    80KB

  • Sample

    220521-p7dfjaggf8

  • MD5

    76367c208e4c38c05347bf3c8c1f3755

  • SHA1

    74f1b08b892d8b9c730a2604a3dfd1c0d0715b63

  • SHA256

    05da06df8d0d14b6e5779466a701d98aac5850e7f53d1106b2f4ad61a99194ef

  • SHA512

    7999988a9662e0bcf94f6a1391cbb74809368c78252351dd168900e9175317e2c364b118871e8473b70e6eed64716fc190a004d0ba2593fe4018c84b2504c8b1

Score
10/10
miraidiscoverylinux

Malware Config

Targets

    • Target

      05da06df8d0d14b6e5779466a701d98aac5850e7f53d1106b2f4ad61a99194ef

    • Size

      80KB

    • MD5

      76367c208e4c38c05347bf3c8c1f3755

    • SHA1

      74f1b08b892d8b9c730a2604a3dfd1c0d0715b63

    • SHA256

      05da06df8d0d14b6e5779466a701d98aac5850e7f53d1106b2f4ad61a99194ef

    • SHA512

      7999988a9662e0bcf94f6a1391cbb74809368c78252351dd168900e9175317e2c364b118871e8473b70e6eed64716fc190a004d0ba2593fe4018c84b2504c8b1

    Score
    9/10
    discovery

    • Contacts a large (91959) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Scanning

2
T1046

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks