Analysis
-
max time kernel
0s -
max time network
47s -
platform
linux_amd64 -
resource
ubuntu1804-amd64-en-20211208 -
submitted
01-07-2022 04:18
Static task
static1
Behavioral task
behavioral1
Sample
8c765d8fdc96e55d5d050e875b5b58108ec0754cef6b9bf76684db49890e2e28
Resource
ubuntu1804-amd64-en-20211208
linux_amd64
0 signatures
0 seconds
General
-
Target
8c765d8fdc96e55d5d050e875b5b58108ec0754cef6b9bf76684db49890e2e28
-
Size
611KB
-
MD5
28b4c1d34913014f2ea43298db493216
-
SHA1
113cb9d7f85f8d264f5a75ede41e275478841aac
-
SHA256
8c765d8fdc96e55d5d050e875b5b58108ec0754cef6b9bf76684db49890e2e28
-
SHA512
634af7f9986942d1e81fef965ea7f068051f72f2102e4dce0861a2df3c983f3d0001b7b9eec7ee98f6110eeed24761145aebaac9b7a267a84975797c00391e1b
Score
9/10
Malware Config
Signatures
-
Writes file to system bin folder 1 TTPs 3 IoCs
Processes:
description ioc /bin/dtjnbafmgr /bin/dtjnbafmgr /bin/yaejippwll /bin/yaejippwll /bin/znmnkvbkmy /bin/znmnkvbkmy -
Creates/modifies Cron job 1 TTPs 2 IoCs
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
Processes:
sedshdescription ioc Process /etc/crontab /etc/crontab sed /etc/crontab /etc/crontab sh -
Modifies rc script 1 TTPs 12 IoCs
Adding/modifying system rc scripts is a common persistence mechanism.
Processes:
update-rc.ddescription ioc Process /etc/rc2.d/S908c765d8fdc96e55d5d050e875b5b58108ec0754cef6b9bf76684db49890e2e28 /etc/rc2.d/S908c765d8fdc96e55d5d050e875b5b58108ec0754cef6b9bf76684db49890e2e28