Overview

overview

10

Static

static

10

4020388aa2...126a18

linux_amd64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4020388aa2e67118547bb833fde52bf690d657232ae8ebceecbd985c11126a18

  • Size

    1.2MB

  • Sample

    220708-z3esxahcer

  • MD5

    b28df1bb19c097ba4d3e6771e011ae81

  • SHA1

    691f6e7c0a11cb5ed62660d30a42a979ce60ab8a

  • SHA256

    4020388aa2e67118547bb833fde52bf690d657232ae8ebceecbd985c11126a18

  • SHA512

    4482152fe3f24e226615b529b326322d902ccc457a8d66e781f44ca3e53387200e3e896721598f991a71d08224bd2d01dd59c62cfbf6620574a649ee601a8929

Score
10/10
mrblacklinux

Malware Config

Targets

    • Target

      4020388aa2e67118547bb833fde52bf690d657232ae8ebceecbd985c11126a18

    • Size

      1.2MB

    • MD5

      b28df1bb19c097ba4d3e6771e011ae81

    • SHA1

      691f6e7c0a11cb5ed62660d30a42a979ce60ab8a

    • SHA256

      4020388aa2e67118547bb833fde52bf690d657232ae8ebceecbd985c11126a18

    • SHA512

      4482152fe3f24e226615b529b326322d902ccc457a8d66e781f44ca3e53387200e3e896721598f991a71d08224bd2d01dd59c62cfbf6620574a649ee601a8929

    Score
    9/10

    • Writes file to system bin folder

    • Write file to user bin folder

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

    • Writes file to tmp directory

      Malware often drops required files in the /tmp directory.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks