Overview

overview

10

Static

static

10

5ca4a9f655...7172fb

ubuntu-18.04-amd64

7

Resubmissions

17-08-2022 13:53

220817-q62meabdc8 10

21-07-2022 15:46

220721-s7pqcageb5 10

24-01-2022 04:58

220124-fl3c4acdfj 5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5ca4a9f6553fea64ad2c724bf71d0fac2b372f9e7ce2200814c98aac647172fb

  • Size

    6.6MB

  • Sample

    220721-s7pqcageb5

  • MD5

    3a9cdd8a5cbc3ab10ad64c4bb641b41f

  • SHA1

    e45f89c923d0361ce8f9c64a63031860a76b2d10

  • SHA256

    5ca4a9f6553fea64ad2c724bf71d0fac2b372f9e7ce2200814c98aac647172fb

  • SHA512

    2d1d26081637c925fb6ae5f92b278f87a8253fd65a75c44fdc2c513a24dc9e0658c552ebc9c9c76c70ad948c60901e682184a833aae51a8c4d6220e883e05aef

Score
10/10
wellmess

Malware Config

Extracted

Family

wellmess

C2

http://141.98.212.55:53

https://209.58.186.196:443

Targets

    • Target

      5ca4a9f6553fea64ad2c724bf71d0fac2b372f9e7ce2200814c98aac647172fb

    • Size

      6.6MB

    • MD5

      3a9cdd8a5cbc3ab10ad64c4bb641b41f

    • SHA1

      e45f89c923d0361ce8f9c64a63031860a76b2d10

    • SHA256

      5ca4a9f6553fea64ad2c724bf71d0fac2b372f9e7ce2200814c98aac647172fb

    • SHA512

      2d1d26081637c925fb6ae5f92b278f87a8253fd65a75c44fdc2c513a24dc9e0658c552ebc9c9c76c70ad948c60901e682184a833aae51a8c4d6220e883e05aef

    Score
    7/10

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Matrix

Tasks