General

  • Target
    16daa6fa6f624d3f4acec3b9438ade2ebda25b0a8f888f4ae5edd9cc9f72c216
  • Size 53KB
  • Sample220608-22cm9sdgdl
  • SHA256 16daa6fa6f624d3f4acec3b9438ade2ebda25b0a8f888f4ae5edd9cc9f72c216
  • MD5 SHA1 SHA512

Malware Config

Targets

    • Target
      16daa6fa6f624d3f4acec3b9438ade2ebda25b0a8f888f4ae5edd9cc9f72c216
    • Size 53KB
    • SHA256 16daa6fa6f624d3f4acec3b9438ade2ebda25b0a8f888f4ae5edd9cc9f72c216
    • MD5 SHA1 SHA512
    Score
    9/10
    • Contacts a large (35996) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

MITRE ATT&CK Enterprise v6

Tasks