8c1b779d5da39605330cd8d160ea4618ea83bd33f2732ebef54332853e0c9acc | Triage

Sharing

General

Target

8c1b779d5da39605330cd8d160ea4618ea83bd33f2732ebef54332853e0c9acc.sh
Size

3KB
Sample

221124-jldxaahe77
MD5

7dbbc27e3aad4bf3d8a3990f009e208b
SHA1

0e9246139e1056e165231b637ecbc91eab940c31
SHA256

8c1b779d5da39605330cd8d160ea4618ea83bd33f2732ebef54332853e0c9acc
SHA512

d6d843465ecf48a8423bbe8d8688e7a3050c0f4fbd418433097e4c5bdc85d08b41bbecdf1bb85a2a2933e9180f1fb1276006b6ef2c2861e02b07d66972a5af5b

Score

9^/10

discovery linux

Malware Config

Targets

- Target
  
  8c1b779d5da39605330cd8d160ea4618ea83bd33f2732ebef54332853e0c9acc.sh
- Size
  
  3KB
- MD5
  
  7dbbc27e3aad4bf3d8a3990f009e208b
- SHA1
  
  0e9246139e1056e165231b637ecbc91eab940c31
- SHA256
  
  8c1b779d5da39605330cd8d160ea4618ea83bd33f2732ebef54332853e0c9acc
- SHA512
  
  d6d843465ecf48a8423bbe8d8688e7a3050c0f4fbd418433097e4c5bdc85d08b41bbecdf1bb85a2a2933e9180f1fb1276006b6ef2c2861e02b07d66972a5af5b
Score

9^/10

discovery
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
- Modifies the Watchdog daemon
  Malware like Mirai modify the Watchdog to prevent it restarting an infected system.
- Modifies hosts file
  Adds to hosts file used for mapping hosts to IP addresses.
- Writes DNS configuration
  Writes data to DNS resolver config file.
- Enumerates active TCP sockets
  Gets active TCP sockets from /proc virtual filesystem.
- Reads system network configuration
  Uses contents of /proc filesystem to enumerate network settings.
- Reads runtime system information
  Reads data from /proc virtual filesystem.
- Writes file to tmp directory
  Malware often drops required files in the /tmp directory.
behavioral1 behavioral2 behavioral3 behavioral4

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Impair Defenses

Credential Access

Discovery

Network Service Scanning

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Dynamic Resolution

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4