General

  • Target

    90b7e89949f5542a80c42b209587747a.bin

  • Size

    19KB

  • Sample

    230327-ca6plabb39

  • MD5

    3d04a72853fb51ac846d6ad41f1a019b

  • SHA1

    a5bb0e4b9602e5a907811c55d1fb801a5249f123

  • SHA256

    3eef81a28690a46077167234b0732df3fc63424fdf15b65d59a8b49ff7232781

  • SHA512

    cf5af2370dcd121a952e9b878f4fe5352f6c964b1aaa4f3b5d95374098f61cc96799a7b8d67a241744888e83858869c6fa765cd11f53ad8f9ac7fabab8cd0584

  • SSDEEP

    384:4mInuZwfmCoHQPm6SyS8HXOODlLgYX7XcEquzNazY+yImuvI8Agb:zInuafzAE7Sv2D5uZuzNCYXI89W

Score
7/10

Malware Config

Targets

    • Target

      5ece577eaeb93774eaa94b17c48b7f104408f1926a66e9346f43a260c871b1ee.elf

    • Size

      37KB

    • MD5

      90b7e89949f5542a80c42b209587747a

    • SHA1

      d1adaa6ca36b0932a6c2e636ad968db91ec2ada4

    • SHA256

      5ece577eaeb93774eaa94b17c48b7f104408f1926a66e9346f43a260c871b1ee

    • SHA512

      b9e09dc1f6a25395fed90c2fc908de6f75763fb9acadc99cdae4ca120b84a27060976ecde98754735d9437d2fcc1ba74f85714c9e8023a341a523914e594fbad

    • SSDEEP

      768:GXgB79Gba7VTNyp3NffHJwHTtpG68SpiyDtVdITRR:BB79Gba7VTNypd5wHbD8S5I9

    Score
    7/10
    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Writes file to tmp directory

      Malware often drops required files in the /tmp directory.

MITRE ATT&CK Matrix

Tasks