General

  • Target

    3dd598c51b6d2956a614a3b74cb021795377981e8dab2087ecd0bb2d3caedca6

  • Size

    124KB

  • Sample

    220701-rm5emafghj

  • MD5

    57acd79a0687f0a7655652599a2bfe93

  • SHA1

    23416b88af0d716d93cb69daea62371b40c36df4

  • SHA256

    3dd598c51b6d2956a614a3b74cb021795377981e8dab2087ecd0bb2d3caedca6

  • SHA512

    f1bedf286d56efc20d68d309033da122eac1c9caa3d8de86efc7ede48620bca60106e7762d5c18c90a57b4b81e390b0a7a9574b0511d13dd2fe952e849aa610d

Malware Config

Targets

    • Target

      3dd598c51b6d2956a614a3b74cb021795377981e8dab2087ecd0bb2d3caedca6

    • Size

      124KB

    • MD5

      57acd79a0687f0a7655652599a2bfe93

    • SHA1

      23416b88af0d716d93cb69daea62371b40c36df4

    • SHA256

      3dd598c51b6d2956a614a3b74cb021795377981e8dab2087ecd0bb2d3caedca6

    • SHA512

      f1bedf286d56efc20d68d309033da122eac1c9caa3d8de86efc7ede48620bca60106e7762d5c18c90a57b4b81e390b0a7a9574b0511d13dd2fe952e849aa610d

    Score
    7/10
    • Modifies rc script

      Adding/modifying system rc scripts is a common persistence mechanism.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

MITRE ATT&CK Enterprise v6

Tasks