General

  • Target

    0795290ee8634caeab4d8c88de21994f

  • Size

    140KB

  • Sample

    230326-q1majagf92

  • MD5

    0795290ee8634caeab4d8c88de21994f

  • SHA1

    c0cea0ab841d7178f29aeec95e79e8c6cf0fc0f0

  • SHA256

    f42df781c510bae352fcd61629f30621eb300f5d495954636ceb2f817b47fdd4

  • SHA512

    5163e56b66854749946e207aced8646207d7f99dd48fb07de3782472ae3160c28c6a54a59e730e6bf2876a5b25d43c7d5c15ec41a91f10ce17488f00d4482642

  • SSDEEP

    3072:K1gdBvfRaBNGYAXXpETbZOutJ8adPF4KQTjsV/43giCDebvfcivGmS+Qk:jaLSX5Y4utJ8adPF4fCqCDebvfci+mSy

Malware Config

Targets

    • Target

      0795290ee8634caeab4d8c88de21994f

    • Size

      140KB

    • MD5

      0795290ee8634caeab4d8c88de21994f

    • SHA1

      c0cea0ab841d7178f29aeec95e79e8c6cf0fc0f0

    • SHA256

      f42df781c510bae352fcd61629f30621eb300f5d495954636ceb2f817b47fdd4

    • SHA512

      5163e56b66854749946e207aced8646207d7f99dd48fb07de3782472ae3160c28c6a54a59e730e6bf2876a5b25d43c7d5c15ec41a91f10ce17488f00d4482642

    • SSDEEP

      3072:K1gdBvfRaBNGYAXXpETbZOutJ8adPF4KQTjsV/43giCDebvfcivGmS+Qk:jaLSX5Y4utJ8adPF4fCqCDebvfci+mSy

    Score
    7/10
    • Modifies rc script

      Adding/modifying system rc scripts is a common persistence mechanism.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Boot or Logon Autostart Execution

1
T1547

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Discovery

System Network Configuration Discovery

2
T1016

Tasks