General

  • Target

    37e8ac46bf6de9bbeb9b403f7883f7d74f7fcb4834e0d03864dfd0c085bff284

  • Size

    125KB

  • Sample

    220625-1mnxbadccj

  • MD5

    6b0ce3599ec2b86c0a978aa66ef9b773

  • SHA1

    0e2e8a5cacde36008068485be4add57a583461f8

  • SHA256

    37e8ac46bf6de9bbeb9b403f7883f7d74f7fcb4834e0d03864dfd0c085bff284

  • SHA512

    d184242bd5a7ebac26bd356843d326aa03ecb4127b5c30f7d4331c3884d09acb8aa79b0fb637ca57f26d3a9653e254aa5dc1b1546159f53b51995a04ea0a3eee

Malware Config

Targets

    • Target

      37e8ac46bf6de9bbeb9b403f7883f7d74f7fcb4834e0d03864dfd0c085bff284

    • Size

      125KB

    • MD5

      6b0ce3599ec2b86c0a978aa66ef9b773

    • SHA1

      0e2e8a5cacde36008068485be4add57a583461f8

    • SHA256

      37e8ac46bf6de9bbeb9b403f7883f7d74f7fcb4834e0d03864dfd0c085bff284

    • SHA512

      d184242bd5a7ebac26bd356843d326aa03ecb4127b5c30f7d4331c3884d09acb8aa79b0fb637ca57f26d3a9653e254aa5dc1b1546159f53b51995a04ea0a3eee

    Score
    7/10
    • Modifies rc script

      Adding/modifying system rc scripts is a common persistence mechanism.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

MITRE ATT&CK Enterprise v6

Tasks