Overview

overview

10

Static

static

10

x-8.6-.isis

ubuntu-18.04-amd64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    x-8.6-.ISIS

  • Size

    97KB

  • Sample

    220810-n46ggahhen

  • MD5

    7d75527f02888e48317c58103ce40d9f

  • SHA1

    65acf29c73b998a4e3879d9896e2f64faa1eeaca

  • SHA256

    ab56252942b515d6515dd462d3ff4f4de0ee5a192114b502bedc0e1f89db000a

  • SHA512

    5738b80397e2329327f16b90e8f0d76fba2ed5b92d72365376e7f03823fb35e62ca1c77cea2829f15ce094eb716763394cb00e7bf985c80fb115daaa91911543

Score
10/10
gafgytlinux

Malware Config

Targets

    • Target

      x-8.6-.ISIS

    • Size

      97KB

    • MD5

      7d75527f02888e48317c58103ce40d9f

    • SHA1

      65acf29c73b998a4e3879d9896e2f64faa1eeaca

    • SHA256

      ab56252942b515d6515dd462d3ff4f4de0ee5a192114b502bedc0e1f89db000a

    • SHA512

      5738b80397e2329327f16b90e8f0d76fba2ed5b92d72365376e7f03823fb35e62ca1c77cea2829f15ce094eb716763394cb00e7bf985c80fb115daaa91911543

    Score
    7/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

2
T1016

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks