Overview

overview

10

Static

static

10

5ca4a9f655...7172fb

ubuntu-18.04-amd64

7

Resubmissions

17/08/2022, 13:53

220817-q62meabdc810

21/07/2022, 15:46

220721-s7pqcageb510

24/01/2022, 04:58

220124-fl3c4acdfj5

Sharing

Copy URL Twitter E-mail

General

  • Target
    5ca4a9f6553fea64ad2c724bf71d0fac2b372f9e7ce2200814c98aac647172fb
  • Size 6.6MB
  • Sample220817-q62meabdc8
  • SHA256 5ca4a9f6553fea64ad2c724bf71d0fac2b372f9e7ce2200814c98aac647172fb
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
wellmesslinux

Malware Config

Extracted

Family

  • wellmess

C2

  • http://141.98.212.55:53

  • https://209.58.186.196:443

rsa_privkey.plain
rsa_pubkey.plain
rsa_pubkey.plain
rsa_pubkey.plain

Targets

    • Target
      5ca4a9f6553fea64ad2c724bf71d0fac2b372f9e7ce2200814c98aac647172fb
    • Size 6.6MB
    • SHA256 5ca4a9f6553fea64ad2c724bf71d0fac2b372f9e7ce2200814c98aac647172fb
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Matrix

Tasks