Overview

overview

10

Static

static

91c04ed338...7b5b7f

linux_amd64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    91c04ed338b033fce70cc3437a34bfee33cbdded469ca2496f5f8dee097b5b7f

  • Size

    44KB

  • Sample

    220521-p8qggsghe9

  • MD5

    567ee562827688d2a1da82ea108ba697

  • SHA1

    e5805f6dbd142f6a7695f5400a49f4613b8166cf

  • SHA256

    91c04ed338b033fce70cc3437a34bfee33cbdded469ca2496f5f8dee097b5b7f

  • SHA512

    986fdbe6253058b2749e7d3033218564b99a820fb554006ad9952317cbe409f5c978ab6e2f9bb3f9498a20e8afe15fa7a23b4982ce9bbd5438c924a2acf4ea92

Score
10/10
discoverylinuxsuricata

Malware Config

Targets

    • Target

      91c04ed338b033fce70cc3437a34bfee33cbdded469ca2496f5f8dee097b5b7f

    • Size

      44KB

    • MD5

      567ee562827688d2a1da82ea108ba697

    • SHA1

      e5805f6dbd142f6a7695f5400a49f4613b8166cf

    • SHA256

      91c04ed338b033fce70cc3437a34bfee33cbdded469ca2496f5f8dee097b5b7f

    • SHA512

      986fdbe6253058b2749e7d3033218564b99a820fb554006ad9952317cbe409f5c978ab6e2f9bb3f9498a20e8afe15fa7a23b4982ce9bbd5438c924a2acf4ea92

    Score
    10/10
    discoverysuricata

    • suricata: ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution

      suricata: ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution

      suricata

    • suricata: ET MALWARE Mirai Variant User-Agent (Outbound)

      suricata: ET MALWARE Mirai Variant User-Agent (Outbound)

      suricata

    • Contacts a large (188359) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Scanning

2
T1046

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks