General

  • Target

    b31b2b5ab1bb6e4506b93288b1072556

  • Size

    53KB

  • Sample

    220816-rey8mshhdk

  • MD5

    b31b2b5ab1bb6e4506b93288b1072556

  • SHA1

    d42bef6cf6d944afbbd41eeb24e360ed4bc97baf

  • SHA256

    fd1dcf0e58e81ab6370f5e67d92f2e649c9646f6d3eec86cbb63a002023baf3f

  • SHA512

    ded0621ffad59fb862751c14360afdc50a80ed7e737e93f300d35d8649bc2eb1d227b2296ebd666cb3ef4263984bc5c4ea6b3a1d01d27daea96d044cee05b03a

  • SSDEEP

    1536:3Kj6EMGe9WKuvgzWQ8/l8kZiEJV10j3T14iW:6te9WKuvE8/l8YjJV1g3T1RW

Score
10/10

Malware Config

Targets

    • Target

      b31b2b5ab1bb6e4506b93288b1072556

    • Size

      53KB

    • MD5

      b31b2b5ab1bb6e4506b93288b1072556

    • SHA1

      d42bef6cf6d944afbbd41eeb24e360ed4bc97baf

    • SHA256

      fd1dcf0e58e81ab6370f5e67d92f2e649c9646f6d3eec86cbb63a002023baf3f

    • SHA512

      ded0621ffad59fb862751c14360afdc50a80ed7e737e93f300d35d8649bc2eb1d227b2296ebd666cb3ef4263984bc5c4ea6b3a1d01d27daea96d044cee05b03a

    • SSDEEP

      1536:3Kj6EMGe9WKuvgzWQ8/l8kZiEJV10j3T14iW:6te9WKuvE8/l8YjJV1g3T1RW

    Score
    9/10
    • Contacts a large (24150) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Writes file to tmp directory

      Malware often drops required files in the /tmp directory.

MITRE ATT&CK Matrix ATT&CK v6

Discovery

Network Service Scanning

2
T1046

Tasks