Analysis
-
max time kernel
0s -
max time network
29s -
platform
linux_amd64 -
resource
ubuntu1804-amd64-en-20211208 -
resource tags
-
submitted
01-08-2022 15:58
General
-
Target
889916a6c2aacd3dd19257b514b9622b250a4b9a880fcae81a7113f43d448db8
-
Size
611KB
-
MD5
5c001d195a77ff8cf784d22f0e6716f9
-
SHA1
e0456d0f6609b49a753f73e4a38fe37f5d00639d
-
SHA256
889916a6c2aacd3dd19257b514b9622b250a4b9a880fcae81a7113f43d448db8
-
SHA512
b7da42c9b8f345a28aa15938a6a1b927c3c27b6246debc605b5759a48217460182b4f102c43d6d84c39f0c53475175711763bfb8b7495e49c3615c0ce6f74e71
Score
9/10
Malware Config
Signatures
-
Writes file to system bin folder 1 TTPs 3 IoCs
-
Creates/modifies Cron job 1 TTPs 2 IoCs
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Modifies rc script 1 TTPs 12 IoCs
Adding/modifying system rc scripts is a common persistence mechanism.