2f909d5fc67b754a0fff4eaff653333f3a38f0e7f33adb1d73c1ebd27fe192b6 | Triage

Resubmissions

07/02/2023, 21:06

230207-zx6pfafa71 8

07/02/2023, 18:57

230207-xl7fgsge5t 8

Sharing

General

Target

2f909d5fc67b754a0fff4eaff653333f3a38f0e7f33adb1d73c1ebd27fe192b6
Size

320B
Sample

230207-zx6pfafa71
MD5

d4c058db66b0e54c8a6ae4c967479675
SHA1

8fc148163e25f149fbe0d49faa5359d33a67e087
SHA256

2f909d5fc67b754a0fff4eaff653333f3a38f0e7f33adb1d73c1ebd27fe192b6
SHA512

fcb8b851b40631fbc03f2e73045c92143ea6569eb8dcd82ca5335d7fa4c3d904041279cdadf7e9346af410eb9564b08256a0db6b448234eb4ed0785ceb94eaa2

Score

8^/10

linux

Malware Config

Targets

- Target
  
  2f909d5fc67b754a0fff4eaff653333f3a38f0e7f33adb1d73c1ebd27fe192b6
- Size
  
  320B
- MD5
  
  d4c058db66b0e54c8a6ae4c967479675
- SHA1
  
  8fc148163e25f149fbe0d49faa5359d33a67e087
- SHA256
  
  2f909d5fc67b754a0fff4eaff653333f3a38f0e7f33adb1d73c1ebd27fe192b6
- SHA512
  
  fcb8b851b40631fbc03f2e73045c92143ea6569eb8dcd82ca5335d7fa4c3d904041279cdadf7e9346af410eb9564b08256a0db6b448234eb4ed0785ceb94eaa2
Score

8^/10
- Modifies hosts file
  Adds to hosts file used for mapping hosts to IP addresses.
- Writes DNS configuration
  Writes data to DNS resolver config file.
- Reads runtime system information
  Reads data from /proc virtual filesystem.
- Writes file to tmp directory
  Malware often drops required files in the /tmp directory.
behavioral1 behavioral2 behavioral3 behavioral4

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Dynamic Resolution

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4