Resubmissions
12/06/2023, 19:00
230612-xn5dxadh7v 1012/06/2023, 19:00
230612-xnp9zsdh61 1012/06/2023, 18:59
230612-xm9l8sdh6y 10Analysis
-
max time kernel
15s -
platform
linux_amd64 -
resource
ubuntu1804-amd64-en-20211208 -
resource tags
-
submitted
12/06/2023, 18:59
General
-
Target
flood
-
Size
25KB
-
MD5
937bc9a46705438008c4e1d3cf26bd05
-
SHA1
511d83dba0111e85344b7382bf5d41a3dee3b0c4
-
SHA256
64d1162a5729ff33be36f3719e70db1129a5ce7a6d01705587e7a29f1db0879b
-
SHA512
e2b684145eeacdfe453a990b581a22fa3fc9b051f962b231ce095253b5c97d4e44af57e2f60884665dfa567f767b07b7b01b68ea27452fd19cc774548964dea1
-
SSDEEP
768:AFTaLRRgnCEfXvn/3PHfXvn/3PHfXSV1hTk6:GTqRRgQH
Malware Config
Signatures
-
Contains strings common to LOLSquad DDoS tools 37 IoCs
Resembles a range of public tools written in C intended for DDoS attacks.
-
Executes dropped EXE 18 IoCs
-
Creates/modifies Cron job 1 TTPs 19 IoCs
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Writes file to system bin folder 1 TTPs 1 IoCs
-
Reads runtime system information 19 IoCs
Reads data from /proc virtual filesystem.
-
Writes file to tmp directory 19 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/flood/tmp/flood1⤵
- Creates/modifies Cron job
- Writes file to system bin folder
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/fileWv1DKl/tmp/flood2⤵
- Executes dropped EXE
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/fileIG8pwu/tmp/flood3⤵
- Executes dropped EXE
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/fileLfDrxY/tmp/flood4⤵
- Executes dropped EXE
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/file0OZABA/tmp/flood5⤵
- Executes dropped EXE
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/filegFCMUY/tmp/flood6⤵
- Executes dropped EXE
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/filexd7nHA/tmp/flood7⤵
- Executes dropped EXE
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/fileZU2yhZ/tmp/flood8⤵
- Executes dropped EXE
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/fileQiKKZA/tmp/flood9⤵
- Executes dropped EXE
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/fileYNJXs6/tmp/flood10⤵
- Executes dropped EXE
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/filem5KI6y/tmp/flood11⤵
- Executes dropped EXE
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/fileJ1l139/tmp/flood12⤵
- Executes dropped EXE
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/fileGSTTlK/tmp/flood13⤵
- Executes dropped EXE
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/fileSXzo69/tmp/flood14⤵
- Executes dropped EXE
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/fileKwDM1D/tmp/flood15⤵
- Executes dropped EXE
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/filebRTC7d/tmp/flood16⤵
- Executes dropped EXE
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/file7aEOHE/tmp/flood17⤵
- Executes dropped EXE
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/file88xh4f/tmp/flood18⤵
- Executes dropped EXE
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/fileScdqnI/tmp/flood19⤵
- Executes dropped EXE
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
92B
MD53f006f7f81fc17be7f4a0d3da0fad5de
SHA197a94d3d0654c6551057af3809b52572bd7f9f5d
SHA256982f9e0f089b91ba79df723435099df15c72e1201a45010ee60226ab136c93bf
SHA51297d2ac0057427b940ada7c0fc805c1966e2535c3c3767ca85fef4a7e0fdc9d4ef9eb133530408b1e439df067881cb317e948ad9bfd487e958a04c97d9db978e0
-
Filesize
25KB
MD5937bc9a46705438008c4e1d3cf26bd05
SHA1511d83dba0111e85344b7382bf5d41a3dee3b0c4
SHA25664d1162a5729ff33be36f3719e70db1129a5ce7a6d01705587e7a29f1db0879b
SHA512e2b684145eeacdfe453a990b581a22fa3fc9b051f962b231ce095253b5c97d4e44af57e2f60884665dfa567f767b07b7b01b68ea27452fd19cc774548964dea1
-
Filesize
16KB
MD5c74a011fe4e82910cdf61a4b0e854bd4
SHA103859088f3b6cd7b788651a22226c81ddb98ee54
SHA256894a17da38ac6ca66703102e310fca36dd0d33d4e60683a63d1bb0e9e8130338
SHA51244147d189c3f16e96d5140e8a335e348c73fc7a9f1885c2df7a312192a6912b693ff3e9373bfda695ef0646678ea993a1a9134eed5295d0c337512881066682a
-
Filesize
16KB
MD5c74a011fe4e82910cdf61a4b0e854bd4
SHA103859088f3b6cd7b788651a22226c81ddb98ee54
SHA256894a17da38ac6ca66703102e310fca36dd0d33d4e60683a63d1bb0e9e8130338
SHA51244147d189c3f16e96d5140e8a335e348c73fc7a9f1885c2df7a312192a6912b693ff3e9373bfda695ef0646678ea993a1a9134eed5295d0c337512881066682a
-
Filesize
16KB
MD5c74a011fe4e82910cdf61a4b0e854bd4
SHA103859088f3b6cd7b788651a22226c81ddb98ee54
SHA256894a17da38ac6ca66703102e310fca36dd0d33d4e60683a63d1bb0e9e8130338
SHA51244147d189c3f16e96d5140e8a335e348c73fc7a9f1885c2df7a312192a6912b693ff3e9373bfda695ef0646678ea993a1a9134eed5295d0c337512881066682a
-
Filesize
25KB
MD5937bc9a46705438008c4e1d3cf26bd05
SHA1511d83dba0111e85344b7382bf5d41a3dee3b0c4
SHA25664d1162a5729ff33be36f3719e70db1129a5ce7a6d01705587e7a29f1db0879b
SHA512e2b684145eeacdfe453a990b581a22fa3fc9b051f962b231ce095253b5c97d4e44af57e2f60884665dfa567f767b07b7b01b68ea27452fd19cc774548964dea1
-
Filesize
16KB
MD5c74a011fe4e82910cdf61a4b0e854bd4
SHA103859088f3b6cd7b788651a22226c81ddb98ee54
SHA256894a17da38ac6ca66703102e310fca36dd0d33d4e60683a63d1bb0e9e8130338
SHA51244147d189c3f16e96d5140e8a335e348c73fc7a9f1885c2df7a312192a6912b693ff3e9373bfda695ef0646678ea993a1a9134eed5295d0c337512881066682a
-
Filesize
25KB
MD5937bc9a46705438008c4e1d3cf26bd05
SHA1511d83dba0111e85344b7382bf5d41a3dee3b0c4
SHA25664d1162a5729ff33be36f3719e70db1129a5ce7a6d01705587e7a29f1db0879b
SHA512e2b684145eeacdfe453a990b581a22fa3fc9b051f962b231ce095253b5c97d4e44af57e2f60884665dfa567f767b07b7b01b68ea27452fd19cc774548964dea1
-
Filesize
16KB
MD5c74a011fe4e82910cdf61a4b0e854bd4
SHA103859088f3b6cd7b788651a22226c81ddb98ee54
SHA256894a17da38ac6ca66703102e310fca36dd0d33d4e60683a63d1bb0e9e8130338
SHA51244147d189c3f16e96d5140e8a335e348c73fc7a9f1885c2df7a312192a6912b693ff3e9373bfda695ef0646678ea993a1a9134eed5295d0c337512881066682a
-
Filesize
25KB
MD5937bc9a46705438008c4e1d3cf26bd05
SHA1511d83dba0111e85344b7382bf5d41a3dee3b0c4
SHA25664d1162a5729ff33be36f3719e70db1129a5ce7a6d01705587e7a29f1db0879b
SHA512e2b684145eeacdfe453a990b581a22fa3fc9b051f962b231ce095253b5c97d4e44af57e2f60884665dfa567f767b07b7b01b68ea27452fd19cc774548964dea1
-
Filesize
16KB
MD5c74a011fe4e82910cdf61a4b0e854bd4
SHA103859088f3b6cd7b788651a22226c81ddb98ee54
SHA256894a17da38ac6ca66703102e310fca36dd0d33d4e60683a63d1bb0e9e8130338
SHA51244147d189c3f16e96d5140e8a335e348c73fc7a9f1885c2df7a312192a6912b693ff3e9373bfda695ef0646678ea993a1a9134eed5295d0c337512881066682a
-
Filesize
25KB
MD5937bc9a46705438008c4e1d3cf26bd05
SHA1511d83dba0111e85344b7382bf5d41a3dee3b0c4
SHA25664d1162a5729ff33be36f3719e70db1129a5ce7a6d01705587e7a29f1db0879b
SHA512e2b684145eeacdfe453a990b581a22fa3fc9b051f962b231ce095253b5c97d4e44af57e2f60884665dfa567f767b07b7b01b68ea27452fd19cc774548964dea1
-
Filesize
16KB
MD5c74a011fe4e82910cdf61a4b0e854bd4
SHA103859088f3b6cd7b788651a22226c81ddb98ee54
SHA256894a17da38ac6ca66703102e310fca36dd0d33d4e60683a63d1bb0e9e8130338
SHA51244147d189c3f16e96d5140e8a335e348c73fc7a9f1885c2df7a312192a6912b693ff3e9373bfda695ef0646678ea993a1a9134eed5295d0c337512881066682a
-
Filesize
25KB
MD5937bc9a46705438008c4e1d3cf26bd05
SHA1511d83dba0111e85344b7382bf5d41a3dee3b0c4
SHA25664d1162a5729ff33be36f3719e70db1129a5ce7a6d01705587e7a29f1db0879b
SHA512e2b684145eeacdfe453a990b581a22fa3fc9b051f962b231ce095253b5c97d4e44af57e2f60884665dfa567f767b07b7b01b68ea27452fd19cc774548964dea1
-
Filesize
16KB
MD5c74a011fe4e82910cdf61a4b0e854bd4
SHA103859088f3b6cd7b788651a22226c81ddb98ee54
SHA256894a17da38ac6ca66703102e310fca36dd0d33d4e60683a63d1bb0e9e8130338
SHA51244147d189c3f16e96d5140e8a335e348c73fc7a9f1885c2df7a312192a6912b693ff3e9373bfda695ef0646678ea993a1a9134eed5295d0c337512881066682a
-
Filesize
25KB
MD5937bc9a46705438008c4e1d3cf26bd05
SHA1511d83dba0111e85344b7382bf5d41a3dee3b0c4
SHA25664d1162a5729ff33be36f3719e70db1129a5ce7a6d01705587e7a29f1db0879b
SHA512e2b684145eeacdfe453a990b581a22fa3fc9b051f962b231ce095253b5c97d4e44af57e2f60884665dfa567f767b07b7b01b68ea27452fd19cc774548964dea1
-
Filesize
16KB
MD5c74a011fe4e82910cdf61a4b0e854bd4
SHA103859088f3b6cd7b788651a22226c81ddb98ee54
SHA256894a17da38ac6ca66703102e310fca36dd0d33d4e60683a63d1bb0e9e8130338
SHA51244147d189c3f16e96d5140e8a335e348c73fc7a9f1885c2df7a312192a6912b693ff3e9373bfda695ef0646678ea993a1a9134eed5295d0c337512881066682a
-
Filesize
25KB
MD5937bc9a46705438008c4e1d3cf26bd05
SHA1511d83dba0111e85344b7382bf5d41a3dee3b0c4
SHA25664d1162a5729ff33be36f3719e70db1129a5ce7a6d01705587e7a29f1db0879b
SHA512e2b684145eeacdfe453a990b581a22fa3fc9b051f962b231ce095253b5c97d4e44af57e2f60884665dfa567f767b07b7b01b68ea27452fd19cc774548964dea1
-
Filesize
16KB
MD5c74a011fe4e82910cdf61a4b0e854bd4
SHA103859088f3b6cd7b788651a22226c81ddb98ee54
SHA256894a17da38ac6ca66703102e310fca36dd0d33d4e60683a63d1bb0e9e8130338
SHA51244147d189c3f16e96d5140e8a335e348c73fc7a9f1885c2df7a312192a6912b693ff3e9373bfda695ef0646678ea993a1a9134eed5295d0c337512881066682a
-
Filesize
25KB
MD5937bc9a46705438008c4e1d3cf26bd05
SHA1511d83dba0111e85344b7382bf5d41a3dee3b0c4
SHA25664d1162a5729ff33be36f3719e70db1129a5ce7a6d01705587e7a29f1db0879b
SHA512e2b684145eeacdfe453a990b581a22fa3fc9b051f962b231ce095253b5c97d4e44af57e2f60884665dfa567f767b07b7b01b68ea27452fd19cc774548964dea1
-
Filesize
16KB
MD5c74a011fe4e82910cdf61a4b0e854bd4
SHA103859088f3b6cd7b788651a22226c81ddb98ee54
SHA256894a17da38ac6ca66703102e310fca36dd0d33d4e60683a63d1bb0e9e8130338
SHA51244147d189c3f16e96d5140e8a335e348c73fc7a9f1885c2df7a312192a6912b693ff3e9373bfda695ef0646678ea993a1a9134eed5295d0c337512881066682a
-
Filesize
25KB
MD5937bc9a46705438008c4e1d3cf26bd05
SHA1511d83dba0111e85344b7382bf5d41a3dee3b0c4
SHA25664d1162a5729ff33be36f3719e70db1129a5ce7a6d01705587e7a29f1db0879b
SHA512e2b684145eeacdfe453a990b581a22fa3fc9b051f962b231ce095253b5c97d4e44af57e2f60884665dfa567f767b07b7b01b68ea27452fd19cc774548964dea1
-
Filesize
16KB
MD5c74a011fe4e82910cdf61a4b0e854bd4
SHA103859088f3b6cd7b788651a22226c81ddb98ee54
SHA256894a17da38ac6ca66703102e310fca36dd0d33d4e60683a63d1bb0e9e8130338
SHA51244147d189c3f16e96d5140e8a335e348c73fc7a9f1885c2df7a312192a6912b693ff3e9373bfda695ef0646678ea993a1a9134eed5295d0c337512881066682a
-
Filesize
25KB
MD5937bc9a46705438008c4e1d3cf26bd05
SHA1511d83dba0111e85344b7382bf5d41a3dee3b0c4
SHA25664d1162a5729ff33be36f3719e70db1129a5ce7a6d01705587e7a29f1db0879b
SHA512e2b684145eeacdfe453a990b581a22fa3fc9b051f962b231ce095253b5c97d4e44af57e2f60884665dfa567f767b07b7b01b68ea27452fd19cc774548964dea1
-
Filesize
16KB
MD5c74a011fe4e82910cdf61a4b0e854bd4
SHA103859088f3b6cd7b788651a22226c81ddb98ee54
SHA256894a17da38ac6ca66703102e310fca36dd0d33d4e60683a63d1bb0e9e8130338
SHA51244147d189c3f16e96d5140e8a335e348c73fc7a9f1885c2df7a312192a6912b693ff3e9373bfda695ef0646678ea993a1a9134eed5295d0c337512881066682a
-
Filesize
25KB
MD5937bc9a46705438008c4e1d3cf26bd05
SHA1511d83dba0111e85344b7382bf5d41a3dee3b0c4
SHA25664d1162a5729ff33be36f3719e70db1129a5ce7a6d01705587e7a29f1db0879b
SHA512e2b684145eeacdfe453a990b581a22fa3fc9b051f962b231ce095253b5c97d4e44af57e2f60884665dfa567f767b07b7b01b68ea27452fd19cc774548964dea1
-
Filesize
16KB
MD5c74a011fe4e82910cdf61a4b0e854bd4
SHA103859088f3b6cd7b788651a22226c81ddb98ee54
SHA256894a17da38ac6ca66703102e310fca36dd0d33d4e60683a63d1bb0e9e8130338
SHA51244147d189c3f16e96d5140e8a335e348c73fc7a9f1885c2df7a312192a6912b693ff3e9373bfda695ef0646678ea993a1a9134eed5295d0c337512881066682a
-
Filesize
25KB
MD5937bc9a46705438008c4e1d3cf26bd05
SHA1511d83dba0111e85344b7382bf5d41a3dee3b0c4
SHA25664d1162a5729ff33be36f3719e70db1129a5ce7a6d01705587e7a29f1db0879b
SHA512e2b684145eeacdfe453a990b581a22fa3fc9b051f962b231ce095253b5c97d4e44af57e2f60884665dfa567f767b07b7b01b68ea27452fd19cc774548964dea1
-
Filesize
16KB
MD5c74a011fe4e82910cdf61a4b0e854bd4
SHA103859088f3b6cd7b788651a22226c81ddb98ee54
SHA256894a17da38ac6ca66703102e310fca36dd0d33d4e60683a63d1bb0e9e8130338
SHA51244147d189c3f16e96d5140e8a335e348c73fc7a9f1885c2df7a312192a6912b693ff3e9373bfda695ef0646678ea993a1a9134eed5295d0c337512881066682a
-
Filesize
25KB
MD5937bc9a46705438008c4e1d3cf26bd05
SHA1511d83dba0111e85344b7382bf5d41a3dee3b0c4
SHA25664d1162a5729ff33be36f3719e70db1129a5ce7a6d01705587e7a29f1db0879b
SHA512e2b684145eeacdfe453a990b581a22fa3fc9b051f962b231ce095253b5c97d4e44af57e2f60884665dfa567f767b07b7b01b68ea27452fd19cc774548964dea1
-
Filesize
16KB
MD5c74a011fe4e82910cdf61a4b0e854bd4
SHA103859088f3b6cd7b788651a22226c81ddb98ee54
SHA256894a17da38ac6ca66703102e310fca36dd0d33d4e60683a63d1bb0e9e8130338
SHA51244147d189c3f16e96d5140e8a335e348c73fc7a9f1885c2df7a312192a6912b693ff3e9373bfda695ef0646678ea993a1a9134eed5295d0c337512881066682a
-
Filesize
25KB
MD5937bc9a46705438008c4e1d3cf26bd05
SHA1511d83dba0111e85344b7382bf5d41a3dee3b0c4
SHA25664d1162a5729ff33be36f3719e70db1129a5ce7a6d01705587e7a29f1db0879b
SHA512e2b684145eeacdfe453a990b581a22fa3fc9b051f962b231ce095253b5c97d4e44af57e2f60884665dfa567f767b07b7b01b68ea27452fd19cc774548964dea1
-
Filesize
16KB
MD5c74a011fe4e82910cdf61a4b0e854bd4
SHA103859088f3b6cd7b788651a22226c81ddb98ee54
SHA256894a17da38ac6ca66703102e310fca36dd0d33d4e60683a63d1bb0e9e8130338
SHA51244147d189c3f16e96d5140e8a335e348c73fc7a9f1885c2df7a312192a6912b693ff3e9373bfda695ef0646678ea993a1a9134eed5295d0c337512881066682a
-
Filesize
25KB
MD5937bc9a46705438008c4e1d3cf26bd05
SHA1511d83dba0111e85344b7382bf5d41a3dee3b0c4
SHA25664d1162a5729ff33be36f3719e70db1129a5ce7a6d01705587e7a29f1db0879b
SHA512e2b684145eeacdfe453a990b581a22fa3fc9b051f962b231ce095253b5c97d4e44af57e2f60884665dfa567f767b07b7b01b68ea27452fd19cc774548964dea1
-
Filesize
16KB
MD5c74a011fe4e82910cdf61a4b0e854bd4
SHA103859088f3b6cd7b788651a22226c81ddb98ee54
SHA256894a17da38ac6ca66703102e310fca36dd0d33d4e60683a63d1bb0e9e8130338
SHA51244147d189c3f16e96d5140e8a335e348c73fc7a9f1885c2df7a312192a6912b693ff3e9373bfda695ef0646678ea993a1a9134eed5295d0c337512881066682a
-
Filesize
25KB
MD5937bc9a46705438008c4e1d3cf26bd05
SHA1511d83dba0111e85344b7382bf5d41a3dee3b0c4
SHA25664d1162a5729ff33be36f3719e70db1129a5ce7a6d01705587e7a29f1db0879b
SHA512e2b684145eeacdfe453a990b581a22fa3fc9b051f962b231ce095253b5c97d4e44af57e2f60884665dfa567f767b07b7b01b68ea27452fd19cc774548964dea1
-
Filesize
16KB
MD5c74a011fe4e82910cdf61a4b0e854bd4
SHA103859088f3b6cd7b788651a22226c81ddb98ee54
SHA256894a17da38ac6ca66703102e310fca36dd0d33d4e60683a63d1bb0e9e8130338
SHA51244147d189c3f16e96d5140e8a335e348c73fc7a9f1885c2df7a312192a6912b693ff3e9373bfda695ef0646678ea993a1a9134eed5295d0c337512881066682a
-
Filesize
25KB
MD5937bc9a46705438008c4e1d3cf26bd05
SHA1511d83dba0111e85344b7382bf5d41a3dee3b0c4
SHA25664d1162a5729ff33be36f3719e70db1129a5ce7a6d01705587e7a29f1db0879b
SHA512e2b684145eeacdfe453a990b581a22fa3fc9b051f962b231ce095253b5c97d4e44af57e2f60884665dfa567f767b07b7b01b68ea27452fd19cc774548964dea1