Overview

overview

5

Static

static

sample.tar

windows7-x64

3

sample.tar

windows10-2004-x64

3

mix/a

ubuntu-18.04-amd64

5

mix/a

debian-9-armhf

5

mix/a

debian-9-mips

5

mix/a

debian-9-mipsel

5

mix/core

ubuntu-18.04-amd64

mix/passfile.vbs

windows7-x64

1

mix/passfile.vbs

windows10-2004-x64

1

mix/pscan2

ubuntu-18.04-amd64

mix/s

ubuntu-18.04-amd64

5

mix/s

debian-9-armhf

5

mix/s

debian-9-mips

5

mix/s

debian-9-mipsel

5

mix/screen

ubuntu-18.04-amd64

mix/ssh

ubuntu-18.04-amd64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b5d6ec72610c654bff3a5d18b2f0e649420884ef1c6b42041cb287379c8c491b

  • Size

    853KB

  • Sample

    221125-2x4wysgb3s

  • MD5

    b8e7d5f2255b7b0458d5f707fcfa1fdc

  • SHA1

    420ee9d2c6c1664797d60ed0b996f33653ea8924

  • SHA256

    b5d6ec72610c654bff3a5d18b2f0e649420884ef1c6b42041cb287379c8c491b

  • SHA512

    18ac2fa3df5c234966bd7ca63362c8fdeee652240b4523123880ad40213a9847bc0eaf9f9133fa2d56865b4872b9d35cc60d25947a4da19f90b49de9661d10fc

  • SSDEEP

    24576:FzBh/RViL7QOaXJgU6bsMnPnoGPBMlZRg:FzBhJ8HQO0gU6YMP9PBMlHg

Score
5/10
linux

Malware Config

Targets

    • Target

      sample

    • Size

      1.9MB

    • MD5

      7038536a9cb92307baaf863d16c25d13

    • SHA1

      491aee3882eef35ba091da0cb99fb4d4c10cbdaa

    • SHA256

      10cc639f85b66a175bc871b5571f4e52280041bb4f4580b495aef58373158ec5

    • SHA512

      4ad0cdb0f50954318f6c51e1988f31ef2dd67ba4ed55c7bdd8e9f815123fe1ef30247c807a3b5ee96b2829d1fcfb5641f5d6d79840e478481142f25d2ff8c984

    • SSDEEP

      49152:eSW3fF1utep5UETR3qOhmbFbLyM5ZlovTkqwPtsIn:e5UETBAFbLyM5Zlo

    Score
    3/10
    behavioral1behavioral2

    • Target

      mix/a

    • Size

      289B

    • MD5

      31c230092e617cda93331f1546233b70

    • SHA1

      1af517479e6fe896ebbf3cd13ff34cf3e6924828

    • SHA256

      1371e0eb066b333e1bb23b51e237f087ce130ec8af1b20ad5d12f804cf041fa0

    • SHA512

      41daceb18d33d91b8d91f93e6687f4e3842c1a4f353364e8184e3931fed381b60d55bb34720e87e61f3a9a92853baf1175186c91407867fc444101a42f340c41

    Score
    5/10

    • Writes file to tmp directory

      Malware often drops required files in the /tmp directory.

    behavioral3behavioral4behavioral5behavioral6

    • Target

      mix/core

    • Size

      108KB

    • MD5

      ee3f84a42db4dafb541f29e5de9594ea

    • SHA1

      02c46c546d8a7b04131cd490bc5c324b97162ef2

    • SHA256

      e3fa557fd7320db1b67b2279a93c8e2b8c755794d1736e554db1888659826b59

    • SHA512

      06bc6d7742efd15b0415ac5837e3ff9d5182e19051073aff9b6693e752039e25c4050209536637fecf450efb2cb2950194a028c7c3fe6c73f06ce24cab614c65

    • SSDEEP

      768:CfXB484tG7xe4/OaOIoXOoNaZ7oFadxyneIgEP8gIXwY79UJZxaEs:y4tG9eUOVewGoFJneIgEP8gY9U/Zs

    Score
    1/10
    behavioral7

    • Target

      mix/passfile

    • Size

      64KB

    • MD5

      ca705664aec8a75eb2691836b7f6eb52

    • SHA1

      d5ed8ea0c861855b6e3210b803c0fa7fa7eba185

    • SHA256

      f8e22ead8f7e6f4bcc0b7522ce8cfe414d188693a92a4680a5421e6fe060af4b

    • SHA512

      c9a6ad550ab0a6eea891232f4f62b9158ff81b19f6c6c3da3e0278e50779e0b1b77346da39aef1babe3a168b2ddbaa3bf68aec81a180fe3d26870555b1c2c7c6

    • SSDEEP

      1536:8FdoK4ZfhKh5HzpfW4S3fucSUjo7NKJxjP1dMonyM57jO6lix:M6xZ5Kh5HzVBS3fuBUjoRKJxjP1byM5a

    Score
    1/10
    behavioral8behavioral9

    • Target

      mix/pscan2

    • Size

      5KB

    • MD5

      b3eb1ec8094fa10169dba7a8bd1a97f1

    • SHA1

      ccb291eb13a32ae78edf50e84097fd4c0cf18a1d

    • SHA256

      4422633b12627c70246d868d86cabd6702908b79f3826bcf9222ab20501cb394

    • SHA512

      1d40b81a7a7cb8b39ab79be0b37a7d661b5f629e726a0218f0f242623f0cd590714436a53505e5715fb89eb4f1dd84eaf2e50a322a7bf1bd010b675ecc14acda

    • SSDEEP

      96:fHPWXVs/UEkgsqnnx0t9Oek9LjqFxss/uh9jw+eNm6ci6jizk:fY8kgsqnKtQqbL7+ef

    Score
    1/10
    behavioral10

    • Target

      mix/s

    • Size

      289B

    • MD5

      31c230092e617cda93331f1546233b70

    • SHA1

      1af517479e6fe896ebbf3cd13ff34cf3e6924828

    • SHA256

      1371e0eb066b333e1bb23b51e237f087ce130ec8af1b20ad5d12f804cf041fa0

    • SHA512

      41daceb18d33d91b8d91f93e6687f4e3842c1a4f353364e8184e3931fed381b60d55bb34720e87e61f3a9a92853baf1175186c91407867fc444101a42f340c41

    Score
    5/10

    • Writes file to tmp directory

      Malware often drops required files in the /tmp directory.

    behavioral11behavioral12behavioral13behavioral14

    • Target

      mix/screen

    • Size

      244KB

    • MD5

      cbf0f41bbbafb1c2609bedb943be3b36

    • SHA1

      a240a0118739e72ff89cefa2540bf0d7da8f8a6c

    • SHA256

      2413af510a75ada34716165992a425b35f62ba1478f63746502afd8a8a156b80

    • SHA512

      388cdc9f027aeb2b0ca336e5e262472fa8f0782727abe1e7d53723b4c36108e8b71167c06b9e5e7fb6a91ca4c9bc38be5d509ea17645cd1d23e5685307929943

    • SSDEEP

      3072:vgQ7G4bDuK/gBrcsP3a89qIW5OnApX2KnZJ5l8cZZbel8Ur5fURH59UlNmXXPqHw:vg5SSK/DsyZnpXndqWkr5sH54N2fq

    Score
    1/10
    behavioral15

    • Target

      mix/ssh

    • Size

      1.4MB

    • MD5

      8bb0f33cfe9b2e0eada28a736e4a0b49

    • SHA1

      39cbd315546d77f61848265ca5290a9550727716

    • SHA256

      3c00611b670b128c1ca6d3c6f0e9522eea385e0670e74a9b2b26325b4e13c864

    • SHA512

      6950907f0f10e08f251d063f5142cd2b010e08b5b0eff9ca4bafce2827964c2d94cbb35bb21ba023cd5a6da327ab12a356a839403e9f750048dbe523eec656d1

    • SSDEEP

      24576:19Pp5U7QT5plT3VBiQk0COhOQ4FRaAbF82LyM5Zlonq6FTkFUw:Pp5UETR3qOhmbFbLyM5ZlovTkqw

    Score
    1/10
    behavioral16

MITRE ATT&CK Enterprise v6

Tasks