Extracted

• • Target

    fa0a5c652d3a69d21ce4a5eb65f95537d880fd41190d73eaffc38aa070047108

  • Size

    611KB

  • MD5

    79a7792955c2e7137c68bec4803ce65b

  • SHA1

    43763f2832b4329f2c3f8aca4fba6aa3522351f8

  • SHA256

    fa0a5c652d3a69d21ce4a5eb65f95537d880fd41190d73eaffc38aa070047108

  • SHA512

    360fc13ede6a35ae5fd489a48a760d99fc3c027000cf42da3c6f6a6cb9d0834692395547275751fe568cf0290de45a6d1c7d12c04a36297d17ce237da9aad3e3

  Score

  9^/10

  persistence

  • Writes file to system bin folder

  • Creates/modifies Cron job

    Cron allows running tasks on a schedule, and is commonly used for malware persistence.

    persistence

  • Modifies rc script

    Adding/modifying system rc scripts is a common persistence mechanism.

    persistence

  • Write file to user bin folder

  • Reads runtime system information

    Reads data from /proc virtual filesystem.

  • Writes file to tmp directory

    Malware often drops required files in the /tmp directory.

  behavioral1