General

  • Size

    8MB

  • Sample

    220728-t19ydahhgn

  • MD5

    cae5a8534f74b4e950f707907f5f9b23

  • SHA1

    4c93540751d2cb909b89f1ed002497065880413b

  • SHA256

    4c355a35b6c7caa2f604c110086f4295d6493ef276f8d4ef082f6f44e76c58ee

  • SHA512

    54f8c63c4c2f05ee3a3b24a31cb455b8b7e2f5e96850d6b3da93c5e571c85cdd563dd4961d55dac5d9738e443ebcf90b4b69b20a8e16fe5afc37473f23df7965

Score
10/10

Malware Config

Targets

    • Target

      merlinAgent-default-Linux-x64

    • Size

      8MB

    • MD5

      cae5a8534f74b4e950f707907f5f9b23

    • SHA1

      4c93540751d2cb909b89f1ed002497065880413b

    • SHA256

      4c355a35b6c7caa2f604c110086f4295d6493ef276f8d4ef082f6f44e76c58ee

    • SHA512

      54f8c63c4c2f05ee3a3b24a31cb455b8b7e2f5e96850d6b3da93c5e571c85cdd563dd4961d55dac5d9738e443ebcf90b4b69b20a8e16fe5afc37473f23df7965

    Score
    5/10
    • Enumerates kernel/hardware configuration

      Reads contents of /sys virtual filesystem to enumerate system information.

MITRE ATT&CK Matrix

Collection

    Command and Control

      Credential Access

        Defense Evasion

          Execution

            Exfiltration

              Impact

                Initial Access

                  Lateral Movement

                    Persistence

                      Privilege Escalation