d8598974b224617546317affb3a80e98532799508bf12cc7e0d80087f9274256 | Triage

Resubmissions

23-03-2023 02:11

230323-cmk9esda24 7

23-03-2023 02:05

230323-ch3ynsch79 7

Sharing

General

Target

o11
Size

6.2MB
Sample

230323-cmk9esda24
MD5

aa266a8d811e5c408e544431da5b0707
SHA1

b924ccaaf3e66daacf66601b73a380e2e80ad3d4
SHA256

d8598974b224617546317affb3a80e98532799508bf12cc7e0d80087f9274256
SHA512

92b1e387de2a2324b29df83d2c70d263289ba56cb2cd2508b67bcd899221a331effd8f8a4f3342d011378e1a2e57d12a219c298c64d19a6186a929b64f64cbdd
SSDEEP

98304:6jehM1o3D40qejPluoFDH4XgLiBDF4WK1L7pq95hhTjUc0CwhtsYrzBM5aciSn:eehco3D4m3FDKTKppqdhTjUcbYhiatSn

Score

7^/10

linux upx

Malware Config

Targets

- Target
  
  o11
- Size
  
  6.2MB
- MD5
  
  aa266a8d811e5c408e544431da5b0707
- SHA1
  
  b924ccaaf3e66daacf66601b73a380e2e80ad3d4
- SHA256
  
  d8598974b224617546317affb3a80e98532799508bf12cc7e0d80087f9274256
- SHA512
  
  92b1e387de2a2324b29df83d2c70d263289ba56cb2cd2508b67bcd899221a331effd8f8a4f3342d011378e1a2e57d12a219c298c64d19a6186a929b64f64cbdd
- SSDEEP
  
  98304:6jehM1o3D40qejPluoFDH4XgLiBDF4WK1L7pq95hhTjUc0CwhtsYrzBM5aciSn:eehco3D4m3FDKTKppqdhTjUcbYhiatSn
Score

5^/10
- Enumerates kernel/hardware configuration
  Reads contents of /sys virtual filesystem to enumerate system information.
- Reads runtime system information
  Reads data from /proc virtual filesystem.
- Writes file to tmp directory
  Malware often drops required files in the /tmp directory.
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1