Overview

overview

10

Static

static

10

bd0df26809...19ca55

ubuntu-18.04-amd64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bd0df268097ae4527340b8393733d3ccd47b8a12b956660630698b8d7b19ca55

  • Size

    103KB

  • Sample

    220731-m5vkxsebbn

  • MD5

    6089b7f9fcede0f1560ce9a88b13ec95

  • SHA1

    611482cccde7dc35fdf44f8208e21396a5102978

  • SHA256

    bd0df268097ae4527340b8393733d3ccd47b8a12b956660630698b8d7b19ca55

  • SHA512

    2bb6ebbbcb8d55107a62af47b8a3d07b3cb96e4cfc5bd91c3abe716da28234d14b045999c067de0f9efb497bb9179f2bda30653bbdfd10c007a980517f33d045

Score
10/10
gafgytmiraimirai_x86coronadiscoverylinux

Malware Config

Targets

    • Target

      bd0df268097ae4527340b8393733d3ccd47b8a12b956660630698b8d7b19ca55

    • Size

      103KB

    • MD5

      6089b7f9fcede0f1560ce9a88b13ec95

    • SHA1

      611482cccde7dc35fdf44f8208e21396a5102978

    • SHA256

      bd0df268097ae4527340b8393733d3ccd47b8a12b956660630698b8d7b19ca55

    • SHA512

      2bb6ebbbcb8d55107a62af47b8a3d07b3cb96e4cfc5bd91c3abe716da28234d14b045999c067de0f9efb497bb9179f2bda30653bbdfd10c007a980517f33d045

    Score
    9/10
    discovery

    • Contacts a large (312129) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Scanning

2
T1046

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks