Overview

overview

9

Static

static

bc68c5593b...46176c

ubuntu-18.04-amd64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bc68c5593b90cd328e02df67e546176c

  • Size

    21KB

  • Sample

    220812-t8sztshgh5

  • MD5

    bc68c5593b90cd328e02df67e546176c

  • SHA1

    94f9e9ab8354d4876d8c0a1d9842545045c82d7c

  • SHA256

    55168cbf41e4da79fd8d018a622ff59e97491c0fd6839ff7be3049b7bfaf6af9

  • SHA512

    1f898d8ae56c36eec2a55845ef6d89cd48eba2771413342153a1d460cb2dfda0927e13294c8eca803359375edd07ea6af70c13d100d36be6c57d31058410d19a

Score
9/10
discoverylinux

Malware Config

Targets

    • Target

      bc68c5593b90cd328e02df67e546176c

    • Size

      21KB

    • MD5

      bc68c5593b90cd328e02df67e546176c

    • SHA1

      94f9e9ab8354d4876d8c0a1d9842545045c82d7c

    • SHA256

      55168cbf41e4da79fd8d018a622ff59e97491c0fd6839ff7be3049b7bfaf6af9

    • SHA512

      1f898d8ae56c36eec2a55845ef6d89cd48eba2771413342153a1d460cb2dfda0927e13294c8eca803359375edd07ea6af70c13d100d36be6c57d31058410d19a

    Score
    9/10
    discovery

    • Contacts a large (362303) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Writes file to tmp directory

      Malware often drops required files in the /tmp directory.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks