dnscat2 | 45eacba032367db7f3b031e5d9df10b30d01664f24da6847322f6af1fd8e7f01 | Triage

Resubmissions

07-07-2022 11:56

220707-n39gqsgafn 10

10-06-2022 15:27

220610-svw9nacfaj 8

Sharing

General

Target

45eacba032367db7f3b031e5d9df10b30d01664f24da6847322f6af1fd8e7f01
Size

148KB
Sample

220707-n39gqsgafn
MD5

a0d1e1ec8207c83c7d2d52ff65f0e159
SHA1

3af6ece8ce067986173c48ca3164982acde284a7
SHA256

45eacba032367db7f3b031e5d9df10b30d01664f24da6847322f6af1fd8e7f01
SHA512

40b7ca48abf09f23fee089f478a7355a4ae6a7d03430b5d56d889454c3cc75de7f2bda907bb662504b94586e21b4cbf1e2a0401ca3227b5ef1618985491111b9

Score

10^/10

dnscat2 linux suricata

Malware Config

Targets

- Target
  
  45eacba032367db7f3b031e5d9df10b30d01664f24da6847322f6af1fd8e7f01
- Size
  
  148KB
- MD5
  
  a0d1e1ec8207c83c7d2d52ff65f0e159
- SHA1
  
  3af6ece8ce067986173c48ca3164982acde284a7
- SHA256
  
  45eacba032367db7f3b031e5d9df10b30d01664f24da6847322f6af1fd8e7f01
- SHA512
  
  40b7ca48abf09f23fee089f478a7355a4ae6a7d03430b5d56d889454c3cc75de7f2bda907bb662504b94586e21b4cbf1e2a0401ca3227b5ef1618985491111b9
Score

10^/10

suricata
- suricata: ET MALWARE Symbiote CnC Domain in DNS Lookup (bancodobrasil .dev)
  suricata: ET MALWARE Symbiote CnC Domain in DNS Lookup (bancodobrasil .dev)
  suricata
- Writes DNS configuration
  Writes data to DNS resolver config file.
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Dynamic Resolution

Impact

Tasks

static1

behavioral1