General

  • Target

    i586-20220816-1117

  • Size

    61KB

  • Sample

    220816-neacqsbbc9

  • MD5

    51908da10302f478e101fc8d27c250ca

  • SHA1

    706de82795d4cbed7a51d2f5beec2f8150ebb8a6

  • SHA256

    ab0df35e7866d8841fc8976de6ce56d2e90ed9af1f2602f2895628050dea63b8

  • SHA512

    c8121cc15cb8628c946d68ee8592f1d8ffe05779b233094db0d47252cdad677c61e13ce2798afec3f3a1c14f52e418b0541ed589719692fbddfa7484248f2531

Score
10/10

Malware Config

Targets

    • Target

      i586-20220816-1117

    • Size

      61KB

    • MD5

      51908da10302f478e101fc8d27c250ca

    • SHA1

      706de82795d4cbed7a51d2f5beec2f8150ebb8a6

    • SHA256

      ab0df35e7866d8841fc8976de6ce56d2e90ed9af1f2602f2895628050dea63b8

    • SHA512

      c8121cc15cb8628c946d68ee8592f1d8ffe05779b233094db0d47252cdad677c61e13ce2798afec3f3a1c14f52e418b0541ed589719692fbddfa7484248f2531

    Score
    9/10
    • Contacts a large (23670) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Writes file to tmp directory

      Malware often drops required files in the /tmp directory.

MITRE ATT&CK Enterprise v6

Tasks