Overview

overview

5

Static

static

scan/a

ubuntu-18.04-amd64

5

scan/a

debian-9-armhf

5

scan/a

debian-9-mips

5

scan/a

debian-9-mipsel

5

scan/gen-pass.sh

ubuntu-18.04-amd64

5

scan/gen-pass.sh

debian-9-armhf

5

scan/gen-pass.sh

debian-9-mips

5

scan/gen-pass.sh

debian-9-mipsel

5

scan/go.sh

windows7-x64

3

scan/go.sh

windows10-2004-x64

3

scan/pscan2

ubuntu-18.04-amd64

scan/screen

ubuntu-18.04-amd64

scan/ss

ubuntu-18.04-amd64

1

scan/ssh-scan

ubuntu-18.04-amd64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cf956f9042e7686927bbe2e8f4a8470bd1f019818bf25bfd4ff2835beebef4a7

  • Size

    746KB

  • Sample

    221126-h6yxhsef91

  • MD5

    8b7fcb7d5e9ce6e6d1aa8a4db9355d17

  • SHA1

    539dd40c81cac59359072f49ca1c57a99ed9e7d5

  • SHA256

    cf956f9042e7686927bbe2e8f4a8470bd1f019818bf25bfd4ff2835beebef4a7

  • SHA512

    f16490487df6dad829e6b1974dfea0ba10ceb8ec7ed747cb3f39f7b616e8e35d8fbb9dd502bfd4886823a7e6c795e9f27229965fda313bec40b9a8d4ec84f305

  • SSDEEP

    12288:T8D++0NAOAcKqSHYorxn9k+wZdy0DG06qJscHdKPNPKUYucknRH33/qMiROvPqtD:T8FUXk7x9XwZdwqJsMdKPNPYudh3iPoe

Score
5/10
linux

Malware Config

Targets

    • Target

      scan/a

    • Size

      1KB

    • MD5

      d82ce85b96da4df32e5f7dc8a55e22e4

    • SHA1

      ac978e3339520e28cacb2731fa3017e29dc24fe8

    • SHA256

      11e43d97a82c068e62a342b5fd9cb1ce623e8d46341bc1eb6df94fcd6e238e22

    • SHA512

      b2fb9c2bb5514ad4c1bfdd6603f675f39f528a8db27c7c67789817828648d987c14c5e9f1fb5f20553e79675e1bf12b7c1f2e29c1a7ae8e99641cddd148faa8a

    Score
    5/10

    • Writes file to tmp directory

      Malware often drops required files in the /tmp directory.

    behavioral1behavioral2behavioral3behavioral4

    • Target

      scan/gen-pass.sh

    • Size

      265B

    • MD5

      615c08bb1acdf2f21490450991766187

    • SHA1

      6fca943c9d31ef25cd9263e576021206943c03d5

    • SHA256

      e7031aaa218f814ec442f7fc5cc545980a537d777db491c425d60f0be3366074

    • SHA512

      5cc82a0ba4ce23d6598a719fff2406456a9b8708cfd25572044b180ad3bc64365da3dc2b39e07c357bcb7e9a5706db752dc770524410321e9c06fb9d19d6930b

    Score
    5/10

    • Writes file to tmp directory

      Malware often drops required files in the /tmp directory.

    behavioral5behavioral6behavioral7behavioral8

    • Target

      scan/go.sh

    • Size

      89B

    • MD5

      bf21756d217417fdb9cf757df83cf950

    • SHA1

      e23688da9b2f40e72b84089f65ad04c5bbe8c549

    • SHA256

      e6b189c66e778e1d3334dae526ba1521b634a6eb8e0851368577aad2babbff55

    • SHA512

      610d27f0f00e930a357d3451170974fb0261d833860052c8227f0755cd3e7fee70b351272d37d77b4778a43972a3b325b01ffb4936e7c0d8a66174174220f08a

    Score
    3/10
    behavioral10behavioral9

    • Target

      scan/pscan2

    • Size

      20KB

    • MD5

      acba0143d0cbcf8092b8b44d914d7983

    • SHA1

      dd78792e0efcc8b116341538084f64a19e291432

    • SHA256

      cc3f6c535787c71bed14ec8ac3b6feb59fe3b09fc53c69f1fe592103f2632764

    • SHA512

      d3f761e04b4bb178d586e8ce6d4bdf845d9144609fa62637ddc1333fa302574cfcb071873b14140d81e5271f52b17fdac2c1fb870702bdf00e44ae2a22acade1

    • SSDEEP

      384:fuUyGp50UZlh5aLhOBbdbFsc8aApFW60Vfo:W5CtHaLhOBbdb2c8aApFkBo

    Score
    1/10
    behavioral11

    • Target

      scan/screen

    • Size

      244KB

    • MD5

      cbf0f41bbbafb1c2609bedb943be3b36

    • SHA1

      a240a0118739e72ff89cefa2540bf0d7da8f8a6c

    • SHA256

      2413af510a75ada34716165992a425b35f62ba1478f63746502afd8a8a156b80

    • SHA512

      388cdc9f027aeb2b0ca336e5e262472fa8f0782727abe1e7d53723b4c36108e8b71167c06b9e5e7fb6a91ca4c9bc38be5d509ea17645cd1d23e5685307929943

    • SSDEEP

      3072:vgQ7G4bDuK/gBrcsP3a89qIW5OnApX2KnZJ5l8cZZbel8Ur5fURH59UlNmXXPqHw:vg5SSK/DsyZnpXndqWkr5sH54N2fq

    Score
    1/10
    behavioral12

    • Target

      scan/ss

    • Size

      443KB

    • MD5

      b51a52c9c82bb4401659b4c17c60f89f

    • SHA1

      b45ae5d8d3069ee7f880dd461c931fa711b6ad3d

    • SHA256

      97093a1ef729cb954b2a63d7ccc304b18d0243e2a77d87bbbb94741a0290d762

    • SHA512

      600c956d612b9b59d9846d5e83c009b6bac646ef2ba763dd54126ddf2e1a2c86c70960dbc9f836e6cbd6c7296c3f1801151a1548af904c61375d096c23aa0f68

    • SSDEEP

      6144:gIM21beIrQCxAeQmnT3V3xNNZkYgy2CZTLdUyh:NdbeIrT9QmbVDNZkMZLdUq

    Score
    1/10
    behavioral13

    • Target

      scan/ssh-scan

    • Size

      822KB

    • MD5

      a213ebd69fbc11d612d0374b373f65d8

    • SHA1

      4f64a5b07b0c128771ea21bf4aa15610fc6b071c

    • SHA256

      93df64cc0ff902ad1e80ada56023610ec2c44c3ecde2d36d37a3a748c7fd42bd

    • SHA512

      eb1f005984d50cfd40f26730e8206d9455c1f3560ba90338019911987d2c401e93e70c7565ac68c291a19e04d346fc01cc7b8eaa57942bbcad5d64ab543ad5a3

    • SSDEEP

      24576:U8dJG9L4f0TYRsbalWjFm4z33bavoZ4UZZ2HQ:dzG9LvDbalG04rb6oZ4EQHQ

    Score
    1/10
    behavioral14

MITRE ATT&CK Enterprise v6

Tasks