Overview

overview

9

Static

static

b9b18cf5b1...a73509

linux_armhf

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b9b18cf5b1ed1a0a9530479e072fdd2f79096266577081506f9107282ba73509

  • Size

    179KB

  • Sample

    220521-xmrresfdcq

  • MD5

    41cc9aec4d7521850738e0cd289e027a

  • SHA1

    74bc742b036481a440353ccf83e9821fa6678787

  • SHA256

    b9b18cf5b1ed1a0a9530479e072fdd2f79096266577081506f9107282ba73509

  • SHA512

    7165ffae981255a70c3335df0af49f84bae2ce8427f89ace22d54035d130568a21346783c9d645f34c1f3a53737f481b0f108e9ddc5832f1dea045bb29ad3a6d

Score
9/10
discoverylinux

Malware Config

Targets

    • Target

      b9b18cf5b1ed1a0a9530479e072fdd2f79096266577081506f9107282ba73509

    • Size

      179KB

    • MD5

      41cc9aec4d7521850738e0cd289e027a

    • SHA1

      74bc742b036481a440353ccf83e9821fa6678787

    • SHA256

      b9b18cf5b1ed1a0a9530479e072fdd2f79096266577081506f9107282ba73509

    • SHA512

      7165ffae981255a70c3335df0af49f84bae2ce8427f89ace22d54035d130568a21346783c9d645f34c1f3a53737f481b0f108e9ddc5832f1dea045bb29ad3a6d

    Score
    9/10
    discovery

    • Contacts a large (153990) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Scanning

2
T1046

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks