Overview

overview

9

Static

static

39af238ea4...df1e8e

ubuntu-18.04-amd64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    39af238ea441f2ab706d742a2cdf1e8e

  • Size

    34KB

  • Sample

    220810-ys9d4aeden

  • MD5

    39af238ea441f2ab706d742a2cdf1e8e

  • SHA1

    7d1cc0ab673feef738b2ceeb7b984d6e4aa9f204

  • SHA256

    7a2daa1a923a107747b18273d167b4d97576eb5914c786856b3ba77e112a0e70

  • SHA512

    669b952b7ac1305fe8f9d7fbda4ad0568512a33539f5ae5f4579866cfa567d6218a429d2c88a3bf7e5e2fc2bd8a93f50a32c54ed60c63fa3cc43265df5dd238e

Score
9/10
discoverylinux

Malware Config

Targets

    • Target

      39af238ea441f2ab706d742a2cdf1e8e

    • Size

      34KB

    • MD5

      39af238ea441f2ab706d742a2cdf1e8e

    • SHA1

      7d1cc0ab673feef738b2ceeb7b984d6e4aa9f204

    • SHA256

      7a2daa1a923a107747b18273d167b4d97576eb5914c786856b3ba77e112a0e70

    • SHA512

      669b952b7ac1305fe8f9d7fbda4ad0568512a33539f5ae5f4579866cfa567d6218a429d2c88a3bf7e5e2fc2bd8a93f50a32c54ed60c63fa3cc43265df5dd238e

    Score
    9/10
    discovery

    • Contacts a large (93223) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Writes file to tmp directory

      Malware often drops required files in the /tmp directory.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Scanning

2
T1046

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks