72688b13277ad184ef4ab2a489f911886397cac2b19faa2e88b08f9ed33d9e6b | Triage

Resubmissions

10/05/2023, 14:32

230510-rwgd6aab8z 7

Sharing

Copy URL Twitter E-mail

General

Target

10348756030.zip
Size

471KB
Sample

230510-rwgd6aab8z
MD5

b2f9fc31f52c37b6b5d271bef9f3f36e
SHA1

0e556d8ba20807ae380b553ecc7eb3532bdb919c
SHA256

72688b13277ad184ef4ab2a489f911886397cac2b19faa2e88b08f9ed33d9e6b
SHA512

02fd0f3d1cf95f76fa49647bd5973831985e7a41bd1e002f31620855aefc5594bbcb34144893d92c1d934c9e5aa69e52d4e4f37bfc9127d017c9c591846ed488
SSDEEP

12288:2txOtf8a3nkgKCDl6l5AS/HD5ZSvR04A/o7qiOxMU4aZ:cxO18snjfl6wM9IvxAg7qiOxMxaZ

Score

7^/10

backdoor linux

Malware Config

Targets

- Target
  
  07cc70b287cbed13ef965c5a9815e1e2dcb7bfa4664beafdc7b57b5af3a8dd12
- Size
  
  928KB
- MD5
  
  644fb8fb4f4ff8e7ff90fdbc92357ef3
- SHA1
  
  c55a8c027482ce281903f4b6b0b370a6efc7252c
- SHA256
  
  07cc70b287cbed13ef965c5a9815e1e2dcb7bfa4664beafdc7b57b5af3a8dd12
- SHA512
  
  4593de107a96fbddd31e330ee4bf79ccff5c99d1fbb69f2cd11b57bfaa78505badcb661c7c0e32fccb355fbe6860cfb2ff3eef3ebfd341f4600e25eb5f5caf4d
- SSDEEP
  
  12288:2R4mt8NjnHij39ffwcfSht3g13KyxAl+lxr02RismoSpPh1YtgK8npNdygi:S4mijnHij3Nos9AyK8lnHw1rRKgsgi
Score

7^/10

backdoor
- Creates Raw socket
  Creates a socket that captures raw packets at the device level
- Reads network interface configuration
  Fetches information about one or more active network interfaces.
  backdoor
- Reads system network configuration
  Uses contents of /proc filesystem to enumerate network settings.
- Enumerates kernel/hardware configuration
  Reads contents of /sys virtual filesystem to enumerate system information.
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1