Analysis

  • max time kernel
    0s
  • max time network
    103s
  • platform
    linux_amd64
  • resource
    ubuntu1804-amd64-en-20211208
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    08-08-2022 20:27

General

  • Target

    miori.x86

  • Size

    45KB

  • MD5

    213274ab177802d9a4b395044c5dcc47

  • SHA1

    42bbc51340fbabf426c65d6314d863d40d1ec81b

  • SHA256

    a9fd235bfac3c9324f3d255dbd45ca664d27bf9e43ef68fece2241087e27c818

  • SHA512

    37509f174d1127ea84b156078b2e7a33d09263059fd083c7cb8355edd331c4251ec97307d3d55ae5b561ca66b83ac7c9638b53f8f8bfeb411b1709c0d62d91fc

Score
9/10

Malware Config

Signatures

  • Writes file to system bin folder 1 TTPs 44 IoCs
  • Creates/modifies Cron job 1 TTPs 44 IoCs

    Cron allows running tasks on a schedule, and is commonly used for malware persistence.

  • Reads runtime system information 45 IoCs

    Reads data from /proc virtual filesystem.

  • Writes file to tmp directory 64 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/miori.x86
    /tmp/miori.x86
    1⤵
    • Writes file to system bin folder
    • Creates/modifies Cron job
    • Reads runtime system information
    • Writes file to tmp directory
    PID:577
    • /tmp/filemiZCdi
      /tmp/miori.x86
      2⤵
      • Writes file to system bin folder
      • Creates/modifies Cron job
      • Reads runtime system information
      • Writes file to tmp directory
      PID:582
      • /tmp/fileuksKQS
        /tmp/miori.x86
        3⤵
        • Writes file to system bin folder
        • Creates/modifies Cron job
        • Reads runtime system information
        • Writes file to tmp directory
        PID:583
        • /tmp/fileNibzSg
          /tmp/miori.x86
          4⤵
          • Writes file to system bin folder
          • Creates/modifies Cron job
          • Reads runtime system information
          PID:584
          • /tmp/file7SkUYz
            /tmp/miori.x86
            5⤵
            • Writes file to system bin folder
            • Creates/modifies Cron job
            • Reads runtime system information
            • Writes file to tmp directory
            PID:585
            • /tmp/fileu40p6W
              /tmp/miori.x86
              6⤵
              • Writes file to system bin folder
              • Creates/modifies Cron job
              • Reads runtime system information
              PID:586
              • /tmp/filePNHuVm
                /tmp/miori.x86
                7⤵
                • Writes file to system bin folder
                • Creates/modifies Cron job
                • Reads runtime system information
                • Writes file to tmp directory
                PID:587
                • /tmp/filexsjEdD
                  /tmp/miori.x86
                  8⤵
                  • Writes file to system bin folder
                  • Creates/modifies Cron job
                  • Reads runtime system information
                  PID:588
                  • /tmp/fileGNuxv5
                    /tmp/miori.x86
                    9⤵
                    • Writes file to system bin folder
                    • Creates/modifies Cron job
                    • Reads runtime system information
                    PID:589
                    • /tmp/filehsyHwt
                      /tmp/miori.x86
                      10⤵
                      • Writes file to system bin folder
                      • Creates/modifies Cron job
                      • Reads runtime system information
                      • Writes file to tmp directory
                      PID:590
                      • /tmp/filevPIXoK
                        /tmp/miori.x86
                        11⤵
                        • Writes file to system bin folder
                        • Creates/modifies Cron job
                        • Reads runtime system information
                        • Writes file to tmp directory
                        PID:591
                        • /tmp/fileOATmU8
                          /tmp/miori.x86
                          12⤵
                          • Writes file to system bin folder
                          • Creates/modifies Cron job
                          • Reads runtime system information
                          • Writes file to tmp directory
                          PID:592
                          • /tmp/file7XxYfx
                            /tmp/miori.x86
                            13⤵
                            • Writes file to system bin folder
                            • Creates/modifies Cron job
                            • Reads runtime system information
                            • Writes file to tmp directory
                            PID:593
                            • /tmp/file5CEPPT
                              /tmp/miori.x86
                              14⤵
                              • Writes file to system bin folder
                              • Creates/modifies Cron job
                              • Reads runtime system information
                              PID:594
                              • /tmp/fileWDEt1g
                                /tmp/miori.x86
                                15⤵
                                • Writes file to system bin folder
                                • Creates/modifies Cron job
                                • Reads runtime system information
                                • Writes file to tmp directory
                                PID:595
                                • /tmp/fileZqr6oF
                                  /tmp/miori.x86
                                  16⤵
                                  • Writes file to system bin folder
                                  • Creates/modifies Cron job
                                  • Reads runtime system information
                                  • Writes file to tmp directory
                                  PID:596
                                  • /tmp/filejflVOU
                                    /tmp/miori.x86
                                    17⤵
                                    • Writes file to system bin folder
                                    • Creates/modifies Cron job
                                    • Reads runtime system information
                                    PID:597
                                    • /tmp/fileuRuEgj
                                      /tmp/miori.x86
                                      18⤵
                                      • Writes file to system bin folder
                                      • Creates/modifies Cron job
                                      • Reads runtime system information
                                      • Writes file to tmp directory
                                      PID:598
                                      • /tmp/fileiZmNLy
                                        /tmp/miori.x86
                                        19⤵
                                        • Writes file to system bin folder
                                        • Creates/modifies Cron job
                                        • Reads runtime system information
                                        • Writes file to tmp directory
                                        PID:599
                                        • /tmp/filer92saZ
                                          /tmp/miori.x86
                                          20⤵
                                          • Writes file to system bin folder
                                          • Creates/modifies Cron job
                                          • Reads runtime system information
                                          • Writes file to tmp directory
                                          PID:600
                                          • /tmp/fileWVIArn
                                            /tmp/miori.x86
                                            21⤵
                                            • Writes file to system bin folder
                                            • Creates/modifies Cron job
                                            • Reads runtime system information
                                            • Writes file to tmp directory
                                            PID:601
                                            • /tmp/filesXu43C
                                              /tmp/miori.x86
                                              22⤵
                                              • Writes file to system bin folder
                                              • Creates/modifies Cron job
                                              • Reads runtime system information
                                              • Writes file to tmp directory
                                              PID:602
                                              • /tmp/fileLbANb5
                                                /tmp/miori.x86
                                                23⤵
                                                • Writes file to system bin folder
                                                • Creates/modifies Cron job
                                                • Reads runtime system information
                                                • Writes file to tmp directory
                                                PID:603
                                                • /tmp/fileIi3dss
                                                  /tmp/miori.x86
                                                  24⤵
                                                  • Writes file to system bin folder
                                                  • Creates/modifies Cron job
                                                  • Reads runtime system information
                                                  • Writes file to tmp directory
                                                  PID:604
                                                  • /tmp/fileM0WhAL
                                                    /tmp/miori.x86
                                                    25⤵
                                                    • Writes file to system bin folder
                                                    • Creates/modifies Cron job
                                                    • Reads runtime system information
                                                    • Writes file to tmp directory
                                                    PID:605
                                                    • /tmp/fileHY8Rqc
                                                      /tmp/miori.x86
                                                      26⤵
                                                      • Writes file to system bin folder
                                                      • Creates/modifies Cron job
                                                      • Reads runtime system information
                                                      • Writes file to tmp directory
                                                      PID:606
                                                      • /tmp/filewVpF8y
                                                        /tmp/miori.x86
                                                        27⤵
                                                        • Writes file to system bin folder
                                                        • Creates/modifies Cron job
                                                        • Reads runtime system information
                                                        • Writes file to tmp directory
                                                        PID:607
                                                        • /tmp/filekyifpU
                                                          /tmp/miori.x86
                                                          28⤵
                                                          • Writes file to system bin folder
                                                          • Creates/modifies Cron job
                                                          • Reads runtime system information
                                                          • Writes file to tmp directory
                                                          PID:608
                                                          • /tmp/file39lLvm
                                                            /tmp/miori.x86
                                                            29⤵
                                                            • Writes file to system bin folder
                                                            • Creates/modifies Cron job
                                                            • Reads runtime system information
                                                            • Writes file to tmp directory
                                                            PID:609
                                                            • /tmp/file8dvrRI
                                                              /tmp/miori.x86
                                                              30⤵
                                                              • Writes file to system bin folder
                                                              • Creates/modifies Cron job
                                                              • Reads runtime system information
                                                              • Writes file to tmp directory
                                                              PID:610
                                                              • /tmp/fileQ65IV7
                                                                /tmp/miori.x86
                                                                31⤵
                                                                • Writes file to system bin folder
                                                                • Creates/modifies Cron job
                                                                • Reads runtime system information
                                                                • Writes file to tmp directory
                                                                PID:611
                                                                • /tmp/filedR5LCF
                                                                  /tmp/miori.x86
                                                                  32⤵
                                                                  • Writes file to system bin folder
                                                                  • Creates/modifies Cron job
                                                                  • Reads runtime system information
                                                                  • Writes file to tmp directory
                                                                  PID:612
                                                                  • /tmp/filebShm0Y
                                                                    /tmp/miori.x86
                                                                    33⤵
                                                                    • Writes file to system bin folder
                                                                    • Creates/modifies Cron job
                                                                    • Reads runtime system information
                                                                    • Writes file to tmp directory
                                                                    PID:613
                                                                    • /tmp/fileeQ9sat
                                                                      /tmp/miori.x86
                                                                      34⤵
                                                                      • Writes file to system bin folder
                                                                      • Creates/modifies Cron job
                                                                      • Reads runtime system information
                                                                      • Writes file to tmp directory
                                                                      PID:614
                                                                      • /tmp/fileVm6TgQ
                                                                        /tmp/miori.x86
                                                                        35⤵
                                                                        • Writes file to system bin folder
                                                                        • Creates/modifies Cron job
                                                                        • Reads runtime system information
                                                                        • Writes file to tmp directory
                                                                        PID:615
                                                                        • /tmp/filexepE2a
                                                                          /tmp/miori.x86
                                                                          36⤵
                                                                          • Writes file to system bin folder
                                                                          • Creates/modifies Cron job
                                                                          • Reads runtime system information
                                                                          • Writes file to tmp directory
                                                                          PID:616
                                                                          • /tmp/filemx6xOz
                                                                            /tmp/miori.x86
                                                                            37⤵
                                                                            • Writes file to system bin folder
                                                                            • Creates/modifies Cron job
                                                                            • Reads runtime system information
                                                                            • Writes file to tmp directory
                                                                            PID:617
                                                                            • /tmp/file06dcOV
                                                                              /tmp/miori.x86
                                                                              38⤵
                                                                              • Writes file to system bin folder
                                                                              • Creates/modifies Cron job
                                                                              • Reads runtime system information
                                                                              • Writes file to tmp directory
                                                                              PID:618
                                                                              • /tmp/file3f6tLl
                                                                                /tmp/miori.x86
                                                                                39⤵
                                                                                • Writes file to system bin folder
                                                                                • Creates/modifies Cron job
                                                                                • Reads runtime system information
                                                                                • Writes file to tmp directory
                                                                                PID:619
                                                                                • /tmp/fileMee4YJ
                                                                                  /tmp/miori.x86
                                                                                  40⤵
                                                                                  • Writes file to system bin folder
                                                                                  • Creates/modifies Cron job
                                                                                  • Reads runtime system information
                                                                                  PID:620
                                                                                  • /tmp/file81sH82
                                                                                    /tmp/miori.x86
                                                                                    41⤵
                                                                                    • Writes file to system bin folder
                                                                                    • Creates/modifies Cron job
                                                                                    • Reads runtime system information
                                                                                    • Writes file to tmp directory
                                                                                    PID:621
                                                                                    • /tmp/fileh2R4Qs
                                                                                      /tmp/miori.x86
                                                                                      42⤵
                                                                                      • Writes file to system bin folder
                                                                                      • Creates/modifies Cron job
                                                                                      • Reads runtime system information
                                                                                      • Writes file to tmp directory
                                                                                      PID:622
                                                                                      • /tmp/filey8YUZR
                                                                                        /tmp/miori.x86
                                                                                        43⤵
                                                                                        • Writes file to system bin folder
                                                                                        • Creates/modifies Cron job
                                                                                        • Reads runtime system information
                                                                                        • Writes file to tmp directory
                                                                                        PID:623
                                                                                        • /tmp/file2TCsWa
                                                                                          /tmp/miori.x86
                                                                                          44⤵
                                                                                          • Writes file to system bin folder
                                                                                          • Creates/modifies Cron job
                                                                                          • Reads runtime system information
                                                                                          • Writes file to tmp directory
                                                                                          PID:624
                                                                                          • /tmp/fileR76gZy
                                                                                            /tmp/miori.x86
                                                                                            45⤵
                                                                                            • Reads runtime system information
                                                                                            PID:625

Network

MITRE ATT&CK Matrix ATT&CK v6

Execution

Scheduled Task

1
T1053

Persistence

Hijack Execution Flow

1
T1574

Scheduled Task

1
T1053

Privilege Escalation

Hijack Execution Flow

1
T1574

Scheduled Task

1
T1053

Defense Evasion

Hijack Execution Flow

1
T1574

Replay Monitor

Loading Replay Monitor...

Downloads