Overview

overview

6

Static

static

1c9536ae74...85f7a6

ubuntu-18.04-amd64

6

1c9536ae74...85f7a6

debian-9-armhf

6

1c9536ae74...85f7a6

debian-9-mips

5

1c9536ae74...85f7a6

debian-9-mipsel

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1c9536ae74850d81225a46c7f503fdc79df79c23fb34f4bb5fd0c0dc6285f7a6

  • Size

    15KB

  • Sample

    221123-s8395add26

  • MD5

    614d98ac77b9c15815cd31cfcf7840b3

  • SHA1

    1e521cb22b27fd0d801a9176ca7d6adcd5bf3821

  • SHA256

    1c9536ae74850d81225a46c7f503fdc79df79c23fb34f4bb5fd0c0dc6285f7a6

  • SHA512

    9cfc6c092ab2942f6eec8557d1d50bf4e6fea8816c7ba5ce3d5d329c4c1970029a238018fa8ab4cc053686dc2a4ccef0737866205eaa953b634f0b36e7cee9b0

  • SSDEEP

    384:ksHYFy+gLES3LnfX9t6tUHef5bUDbGIFgTG10U5VOj:ksHky+gPfyGttFgTY0Nj

Score
6/10
discoverylinux

Malware Config

Targets

    • Target

      1c9536ae74850d81225a46c7f503fdc79df79c23fb34f4bb5fd0c0dc6285f7a6

    • Size

      15KB

    • MD5

      614d98ac77b9c15815cd31cfcf7840b3

    • SHA1

      1e521cb22b27fd0d801a9176ca7d6adcd5bf3821

    • SHA256

      1c9536ae74850d81225a46c7f503fdc79df79c23fb34f4bb5fd0c0dc6285f7a6

    • SHA512

      9cfc6c092ab2942f6eec8557d1d50bf4e6fea8816c7ba5ce3d5d329c4c1970029a238018fa8ab4cc053686dc2a4ccef0737866205eaa953b634f0b36e7cee9b0

    • SSDEEP

      384:ksHYFy+gLES3LnfX9t6tUHef5bUDbGIFgTG10U5VOj:ksHky+gPfyGttFgTY0Nj

    Score
    6/10
    discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Writes file to tmp directory

      Malware often drops required files in the /tmp directory.

    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Scanning

1
T1046

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks