Extracted

• • Target

    5a4ed2401a1f17a3e5c75256dd2869f893abba0dab550d9a10ce41ef44f6139a

  • Size

    611KB

  • MD5

    6e152e7fea20e5c4cd1f35ce1057c49c

  • SHA1

    c4b1bbfe82e55f073a1340e5a5d33319906a288f

  • SHA256

    5a4ed2401a1f17a3e5c75256dd2869f893abba0dab550d9a10ce41ef44f6139a

  • SHA512

    8f818e0a4cb3f2bb8ee51ee30c0c58bfc2402db647011b3ac576102a0f120a9b45b776d58da97d36f1bc0b22e3e1556445fac34466f08985c78bf7fdaaaa8274

  Score

  9^/10

  persistence

  • Writes file to system bin folder

  • Creates/modifies Cron job

    Cron allows running tasks on a schedule, and is commonly used for malware persistence.

    persistence

  • Modifies rc script

    Adding/modifying system rc scripts is a common persistence mechanism.

    persistence

  • Write file to user bin folder

  • Reads runtime system information

    Reads data from /proc virtual filesystem.

  • Writes file to tmp directory

    Malware often drops required files in the /tmp directory.

  behavioral1