General

  • Target

    0468ba5c627dee9f0056f13c5bc2fa82e11f386dcfdfeab1c00412f5dfa2655c

  • Size

    1.2MB

  • Sample

    220527-z126esghan

  • MD5

    916713f6a931d88d4b91b468081aadfa

  • SHA1

    27e4c878a87bc6b9fdca08d785d7ebde1d80f963

  • SHA256

    0468ba5c627dee9f0056f13c5bc2fa82e11f386dcfdfeab1c00412f5dfa2655c

  • SHA512

    8a792e70827864160bc7fe01d31544f8179376e4d3cf410d53dc3baed14e6947c629c891af02d8cf67b5a85a99fbd6efc419c4027596f2504d005a3ec39a9e49

Score
10/10

Malware Config

Targets

    • Target

      0468ba5c627dee9f0056f13c5bc2fa82e11f386dcfdfeab1c00412f5dfa2655c

    • Size

      1.2MB

    • MD5

      916713f6a931d88d4b91b468081aadfa

    • SHA1

      27e4c878a87bc6b9fdca08d785d7ebde1d80f963

    • SHA256

      0468ba5c627dee9f0056f13c5bc2fa82e11f386dcfdfeab1c00412f5dfa2655c

    • SHA512

      8a792e70827864160bc7fe01d31544f8179376e4d3cf410d53dc3baed14e6947c629c891af02d8cf67b5a85a99fbd6efc419c4027596f2504d005a3ec39a9e49

    Score
    9/10
    • Writes file to system bin folder

    • Write file to user bin folder

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

    • Writes file to tmp directory

      Malware often drops required files in the /tmp directory.

MITRE ATT&CK Enterprise v6

Tasks