1c9536ae74850d81225a46c7f503fdc79df79c23fb34f4bb5fd0c0dc6285f7a6 | Triage

Sharing

General

Target

1c9536ae74850d81225a46c7f503fdc79df79c23fb34f4bb5fd0c0dc6285f7a6
Size

15KB
Sample

221123-s8395add26
MD5

614d98ac77b9c15815cd31cfcf7840b3
SHA1

1e521cb22b27fd0d801a9176ca7d6adcd5bf3821
SHA256

1c9536ae74850d81225a46c7f503fdc79df79c23fb34f4bb5fd0c0dc6285f7a6
SHA512

9cfc6c092ab2942f6eec8557d1d50bf4e6fea8816c7ba5ce3d5d329c4c1970029a238018fa8ab4cc053686dc2a4ccef0737866205eaa953b634f0b36e7cee9b0
SSDEEP

384:ksHYFy+gLES3LnfX9t6tUHef5bUDbGIFgTG10U5VOj:ksHky+gPfyGttFgTY0Nj

Score

6^/10

discovery linux

Malware Config

Targets

- Target
  
  1c9536ae74850d81225a46c7f503fdc79df79c23fb34f4bb5fd0c0dc6285f7a6
- Size
  
  15KB
- MD5
  
  614d98ac77b9c15815cd31cfcf7840b3
- SHA1
  
  1e521cb22b27fd0d801a9176ca7d6adcd5bf3821
- SHA256
  
  1c9536ae74850d81225a46c7f503fdc79df79c23fb34f4bb5fd0c0dc6285f7a6
- SHA512
  
  9cfc6c092ab2942f6eec8557d1d50bf4e6fea8816c7ba5ce3d5d329c4c1970029a238018fa8ab4cc053686dc2a4ccef0737866205eaa953b634f0b36e7cee9b0
- SSDEEP
  
  384:ksHYFy+gLES3LnfX9t6tUHef5bUDbGIFgTG10U5VOj:ksHky+gPfyGttFgTY0Nj
Score

6^/10

discovery
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
- Writes file to tmp directory
  Malware often drops required files in the /tmp directory.
behavioral1 behavioral2 behavioral3 behavioral4

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Scanning

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4