Overview

overview

10

Static

static

10

skid.x86-2...9-1656

ubuntu-18.04-amd64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    skid.x86-20220819-1656

  • Size

    57KB

  • Sample

    220819-vf811sgaeq

  • MD5

    acb59b95c2b52341166d9907a961ea3b

  • SHA1

    27f48e76c12532b4b75c5710143d5245006a7728

  • SHA256

    ef402612635d094c1389e837d569924c2bc678aebebf85e0b03db220aad69f80

  • SHA512

    0ce656be9f63e0321db003644b0221ac91de1af968654cf0300e8399e2c8a1e5439a85a9a205d943c2dbceccbc74501397270b136ba6d7762596b4d54532acd5

  • SSDEEP

    1536:P5AbdXlO2OOUVp5a+A/gAeSox6QNF2Czurhw:P5AbdXlkJVpA/gAezxPrHzgw

Score
10/10
miraimirai_x86coronadiscoverylinux

Malware Config

Targets

    • Target

      skid.x86-20220819-1656

    • Size

      57KB

    • MD5

      acb59b95c2b52341166d9907a961ea3b

    • SHA1

      27f48e76c12532b4b75c5710143d5245006a7728

    • SHA256

      ef402612635d094c1389e837d569924c2bc678aebebf85e0b03db220aad69f80

    • SHA512

      0ce656be9f63e0321db003644b0221ac91de1af968654cf0300e8399e2c8a1e5439a85a9a205d943c2dbceccbc74501397270b136ba6d7762596b4d54532acd5

    • SSDEEP

      1536:P5AbdXlO2OOUVp5a+A/gAeSox6QNF2Czurhw:P5AbdXlkJVpA/gAezxPrHzgw

    Score
    9/10
    discovery

    • Contacts a large (23504) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Scanning

2
T1046

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks