Overview

overview

9

Static

static

76e72506fd...3398a7

ubuntu-18.04-amd64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    76e72506fd3a23b9854e5ba8b03398a7

  • Size

    36KB

  • Sample

    220815-l3crnacag3

  • MD5

    76e72506fd3a23b9854e5ba8b03398a7

  • SHA1

    d8d53b3d478b5bfae2aa6fc856c2e33345c2b155

  • SHA256

    39354f020e23e9ac6552945c646413f4a41b054bf83117b2d30b003e40926da0

  • SHA512

    eabce413486a77633ca8ee5160afca299fb3bf0b928ce00418718f59cf2fea14eb17e7164444cd53db89fe7fdf88e32869ed78c19f06b4ed20546689e4e1346c

Score
9/10
discoverylinux

Malware Config

Targets

    • Target

      76e72506fd3a23b9854e5ba8b03398a7

    • Size

      36KB

    • MD5

      76e72506fd3a23b9854e5ba8b03398a7

    • SHA1

      d8d53b3d478b5bfae2aa6fc856c2e33345c2b155

    • SHA256

      39354f020e23e9ac6552945c646413f4a41b054bf83117b2d30b003e40926da0

    • SHA512

      eabce413486a77633ca8ee5160afca299fb3bf0b928ce00418718f59cf2fea14eb17e7164444cd53db89fe7fdf88e32869ed78c19f06b4ed20546689e4e1346c

    Score
    9/10
    discovery

    • Contacts a large (94824) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Writes file to tmp directory

      Malware often drops required files in the /tmp directory.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks