Overview

overview

7

Static

static

1

X86_64

ubuntu-18.04-amd64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    X86_64

  • Size

    35KB

  • Sample

    230328-k85h7abh2t

  • MD5

    1af903914f2f42d913a229ecc9ac9e11

  • SHA1

    e6494f9b769371a14be25fe4fed62118a20f7810

  • SHA256

    fe99f1f91c47bf3c9a166e516420a5a963a3e6b60fbf3a75cafca3f42c4a871c

  • SHA512

    d09d697dbc116a870e702f0b18d2922853178a230809632ec03d44f57547188e4c3d012f4f9d63ca03556c9f1360c497de620f3c5e0665252ce66091d6109334

  • SSDEEP

    768:gqXLTccOHqorgTgNRBKB/Qs+nFZfYnbRFy/Yesv9sPy:jXPpvgNRBKC/Ynbm2Fuy

Score
7/10
linux

Malware Config

Targets

    • Target

      X86_64

    • Size

      35KB

    • MD5

      1af903914f2f42d913a229ecc9ac9e11

    • SHA1

      e6494f9b769371a14be25fe4fed62118a20f7810

    • SHA256

      fe99f1f91c47bf3c9a166e516420a5a963a3e6b60fbf3a75cafca3f42c4a871c

    • SHA512

      d09d697dbc116a870e702f0b18d2922853178a230809632ec03d44f57547188e4c3d012f4f9d63ca03556c9f1360c497de620f3c5e0665252ce66091d6109334

    • SSDEEP

      768:gqXLTccOHqorgTgNRBKB/Qs+nFZfYnbRFy/Yesv9sPy:jXPpvgNRBKC/Ynbm2Fuy

    Score
    7/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

2
T1016

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks