Analysis
-
max time kernel
0s -
max time network
28s -
platform
linux_amd64 -
resource
ubuntu1804-amd64-en-20211208 -
resource tags
-
submitted
02-08-2022 04:02
General
-
Target
5a4ed2401a1f17a3e5c75256dd2869f893abba0dab550d9a10ce41ef44f6139a
-
Size
611KB
-
MD5
6e152e7fea20e5c4cd1f35ce1057c49c
-
SHA1
c4b1bbfe82e55f073a1340e5a5d33319906a288f
-
SHA256
5a4ed2401a1f17a3e5c75256dd2869f893abba0dab550d9a10ce41ef44f6139a
-
SHA512
8f818e0a4cb3f2bb8ee51ee30c0c58bfc2402db647011b3ac576102a0f120a9b45b776d58da97d36f1bc0b22e3e1556445fac34466f08985c78bf7fdaaaa8274
Score
9/10
Malware Config
Signatures
-
Writes file to system bin folder 1 TTPs 3 IoCs
-
Creates/modifies Cron job 1 TTPs 2 IoCs
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Modifies rc script 1 TTPs 12 IoCs
Adding/modifying system rc scripts is a common persistence mechanism.