6c034ff9b5447da62822e3231e5e2d5db225756b3e216f6fc469469cb1d81813 | Triage

Sharing

General

Target

82828c8dd607f4558d234ca57b2baac2.elf
Size

88KB
Sample

230112-l1pcnsff72
MD5

82828c8dd607f4558d234ca57b2baac2
SHA1

020de8e6cb1c3db7a1d5cf4465190994cc96fedc
SHA256

6c034ff9b5447da62822e3231e5e2d5db225756b3e216f6fc469469cb1d81813
SHA512

93a4d4e66a2494ba027d295bfe9b2d965e714c017e4d077225cc2120b0ad94ad153f257970164e6a32b26d8e044188b485f707827481b1a82da5036a16df788d
SSDEEP

1536:2IHSFCvJyM7fk/2iJOUbTjQFRQxOsA9b5uKslRTCEJUCEe75:2C+GoMA/xJVbTSRQxOsAru9lRTC01Ee7

Score

9^/10

discovery linux

Malware Config

Targets

- Target
  
  82828c8dd607f4558d234ca57b2baac2.elf
- Size
  
  88KB
- MD5
  
  82828c8dd607f4558d234ca57b2baac2
- SHA1
  
  020de8e6cb1c3db7a1d5cf4465190994cc96fedc
- SHA256
  
  6c034ff9b5447da62822e3231e5e2d5db225756b3e216f6fc469469cb1d81813
- SHA512
  
  93a4d4e66a2494ba027d295bfe9b2d965e714c017e4d077225cc2120b0ad94ad153f257970164e6a32b26d8e044188b485f707827481b1a82da5036a16df788d
- SSDEEP
  
  1536:2IHSFCvJyM7fk/2iJOUbTjQFRQxOsA9b5uKslRTCEJUCEe75:2C+GoMA/xJVbTSRQxOsAru9lRTC01Ee7
Score

9^/10

discovery
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
- Writes file to tmp directory
  Malware often drops required files in the /tmp directory.
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Scanning

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1