Overview

overview

9

Static

static

5c35717f20...6bc640

ubuntu-18.04-amd64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5c35717f2071b73c652e70eee16bc640

  • Size

    36KB

  • Sample

    220810-ys9d4agdf2

  • MD5

    5c35717f2071b73c652e70eee16bc640

  • SHA1

    93e99ecb0756729776e9e3a066f236a92b773b99

  • SHA256

    e75eb6cdf02631dc1ae26615c6d6f5e9d0ad0dabd10da6a3993445fbbb766051

  • SHA512

    34aced0f8ff2936d3d26b9792e4f3f86e50c4f9938f4603e783233c21be58522a175d2d307cad28993f42d97d766a2d235e1573907dab7084fd90b4bce58d568

Score
9/10
discoverylinux

Malware Config

Targets

    • Target

      5c35717f2071b73c652e70eee16bc640

    • Size

      36KB

    • MD5

      5c35717f2071b73c652e70eee16bc640

    • SHA1

      93e99ecb0756729776e9e3a066f236a92b773b99

    • SHA256

      e75eb6cdf02631dc1ae26615c6d6f5e9d0ad0dabd10da6a3993445fbbb766051

    • SHA512

      34aced0f8ff2936d3d26b9792e4f3f86e50c4f9938f4603e783233c21be58522a175d2d307cad28993f42d97d766a2d235e1573907dab7084fd90b4bce58d568

    Score
    9/10
    discovery

    • Contacts a large (93369) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Writes file to tmp directory

      Malware often drops required files in the /tmp directory.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Scanning

2
T1046

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks