Analysis

  • max time kernel
    0s
  • max time network
    125s
  • platform
    linux_amd64
  • resource
    ubuntu1804-amd64-en-20211208
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    29-09-2022 05:27

General

  • Target

    djobgbiuie.virus

  • Size

    647KB

  • MD5

    2b083aaf4c29ab9952be58294a5fea6f

  • SHA1

    742cc974582435a39f871a843a1509ee2326dca4

  • SHA256

    ab3c8f59b3b6a17814c71012cfb0cba141fcf1fe7a6fbbeada59023ed5342e67

  • SHA512

    78942fb4e91e9221e4296db70790cca085e2d63c0a10032595b5c72970d34ff9adefe62e056e97e0c63ecfa9aa9bdf7e669a02d81176b1fd7ff280c6663f0862

  • SSDEEP

    12288:RBRO1UmJJ0nHgBL9YfJip2qm+x4h1Tonbp6y07l7mtBDvnD/u9hMHDB:RBRpmJ+HyL9AiAqm+x4h1mb6wvnDWXMN

Score
7/10

Malware Config

Signatures

  • Creates/modifies Cron job 1 TTPs 2 IoCs

    Cron allows running tasks on a schedule, and is commonly used for malware persistence.

  • Modifies rc script 1 TTPs 12 IoCs

    Adding/modifying system rc scripts is a common persistence mechanism.