1a796f26d5d9cc76978ecaa0ef63e603a47722545fa1e6939bd85144edcebe86 | Triage

Sharing

General

Target

1a796f26d5d9cc76978ecaa0ef63e603a47722545fa1e6939bd85144edcebe86
Size

128KB
Sample

221201-3xspcsgf2x
MD5

dccb19b35c28110a7c2e436e5ea85c37
SHA1

3f4dbc358e86ce7218b5b7855eeb9e1d7b60fceb
SHA256

1a796f26d5d9cc76978ecaa0ef63e603a47722545fa1e6939bd85144edcebe86
SHA512

4a6466a12876deb429e2c2632ce26a673408fd7521e3f377a7e498ba6458205a6ef9adb7627aa96846721fe61b5e83b54010d760dc58f46ee7aa86d081cec844
SSDEEP

3072:/RblCSIsP4vHfwOjq9Iod7X8Fv+xHuWa+QruY1V1Ow23:/QEsHfwaWIg7MyutNqEK13

Score

9^/10

discovery linux

Malware Config

Targets

- Target
  
  1a796f26d5d9cc76978ecaa0ef63e603a47722545fa1e6939bd85144edcebe86
- Size
  
  128KB
- MD5
  
  dccb19b35c28110a7c2e436e5ea85c37
- SHA1
  
  3f4dbc358e86ce7218b5b7855eeb9e1d7b60fceb
- SHA256
  
  1a796f26d5d9cc76978ecaa0ef63e603a47722545fa1e6939bd85144edcebe86
- SHA512
  
  4a6466a12876deb429e2c2632ce26a673408fd7521e3f377a7e498ba6458205a6ef9adb7627aa96846721fe61b5e83b54010d760dc58f46ee7aa86d081cec844
- SSDEEP
  
  3072:/RblCSIsP4vHfwOjq9Iod7X8Fv+xHuWa+QruY1V1Ow23:/QEsHfwaWIg7MyutNqEK13
Score

9^/10

discovery
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
- Reads runtime system information
  Reads data from /proc virtual filesystem.
- Writes file to tmp directory
  Malware often drops required files in the /tmp directory.
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Scanning

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1