Analysis
-
max time kernel
0s -
max time network
38s -
platform
linux_amd64 -
resource
ubuntu1804-amd64-en-20211208 -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
27-07-2022 00:48
Behavioral task
behavioral1
Sample
53a19c58ec8a57f7b74b9a6236c0292a93068c286aa4fa9424aaa5b53d6e83bb
Resource
ubuntu1804-amd64-en-20211208
ubuntu-18.04-amd64
7 signatures
150 seconds
General
-
Target
53a19c58ec8a57f7b74b9a6236c0292a93068c286aa4fa9424aaa5b53d6e83bb
-
Size
611KB
-
MD5
5a736738e547a853c533fcfdeb4dc82d
-
SHA1
1ffc35650d431e7eb4ec31463cce666e3a26802e
-
SHA256
53a19c58ec8a57f7b74b9a6236c0292a93068c286aa4fa9424aaa5b53d6e83bb
-
SHA512
27bd3ecbb5ee5d0bcaffce680c20fbfaeeb6a1f4424dc1eeca28dd308a7fbf689c7a6dd7be15e8dfef67ba2d41e81edf87aebb747519676641b4438237402e54
Score
9/10
Malware Config
Signatures
-
Writes file to system bin folder 1 TTPs 3 IoCs
Processes:
description ioc /bin/sjvlsqyoan /bin/sjvlsqyoan /bin/vfftvlqejn /bin/vfftvlqejn /bin/apsclqjfba /bin/apsclqjfba -
Creates/modifies Cron job 1 TTPs 2 IoCs
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
Processes:
shseddescription ioc Process /etc/crontab /etc/crontab sh /etc/crontab /etc/crontab sed -
Modifies rc script 1 TTPs 12 IoCs
Adding/modifying system rc scripts is a common persistence mechanism.
Processes:
update-rc.ddescription ioc Process /etc/rc3.d/S9053a19c58ec8a57f7b74b9a6236c0292a93068c286aa4fa9424aaa5b53d6e83bb /etc/rc3.d/S9053a19c58ec8a57f7b74b9a6236c0292a93068c286aa4fa9424aaa5b53d6e83bb