General

  • Target

    skid.x86-20220820-1520

  • Size

    65KB

  • Sample

    220820-sra71sfhh7

  • MD5

    5536e3898d2a07bb09b95e21088391aa

  • SHA1

    392eb8e1edccd7c7f6a9862e101729db1ea4233d

  • SHA256

    2682fb8d9b10e4581eb71fba644bd0a1d5e9af45b078db3ceadfb463c9ffad80

  • SHA512

    dc816bed672562a8a3ab7d457f04727e1e9a1a087891bf706fc1a368b7630d1822aa659c4a266c62bcffb61cf908906ef442b8b7f80d179e2dd41593d539082e

  • SSDEEP

    1536:xyIZr5THgg+9zycTvJw8OYSOKYM1RIl1Ybza5VqylUraL:dZr5THcgcTvJ4YSOobIzYvSkypL

Malware Config

Targets

    • Target

      skid.x86-20220820-1520

    • Size

      65KB

    • MD5

      5536e3898d2a07bb09b95e21088391aa

    • SHA1

      392eb8e1edccd7c7f6a9862e101729db1ea4233d

    • SHA256

      2682fb8d9b10e4581eb71fba644bd0a1d5e9af45b078db3ceadfb463c9ffad80

    • SHA512

      dc816bed672562a8a3ab7d457f04727e1e9a1a087891bf706fc1a368b7630d1822aa659c4a266c62bcffb61cf908906ef442b8b7f80d179e2dd41593d539082e

    • SSDEEP

      1536:xyIZr5THgg+9zycTvJw8OYSOKYM1RIl1Ybza5VqylUraL:dZr5THcgcTvJ4YSOobIzYvSkypL

    Score
    9/10
    • Contacts a large (23510) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

MITRE ATT&CK Matrix ATT&CK v6

Discovery

Network Service Scanning

2
T1046

Tasks