Analysis
-
max time kernel
2s -
max time network
30s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20230621-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20230621-enkernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
27/06/2023, 09:24
Static task
static1
Behavioral task
behavioral1
Sample
20914
Resource
ubuntu1804-amd64-20230621-en
General
-
Target
20914
-
Size
1.2MB
-
MD5
31e0439e6ef1dd29c0db6d96bac59446
-
SHA1
46b02cc186b85e11c3d59790c3a0bfd2ae1f82a5
-
SHA256
09d6dab9b70a74f61c41eaa485b37de9a40c86b6d2eae7413db11b4e6a8256ef
-
SHA512
f7ec29a41f745dfe1f49187b4df3657c261e547bde7d81d81844e02e16d52c71873f5dfdeb6ff4b6e8790fec39e222841fb7353ec1a5f3db357c2292c90eee3e
-
SSDEEP
24576:SBHj9n1SKNk1QbdGfVmNtGtR/2qYeFABKGNPhVc95OTmBrnf4XZnS85weLUo9GO6:SBD9n1SKNk1QbdGfVmNg/lYeFABKG9hC
Malware Config
Signatures
-
Creates/modifies environment variables 1 TTPs 4 IoCs
Creating/modifying environment variables is a common persistence mechanism.
description ioc File opened for modification /home/user/.bashrc File opened for modification /home/user/.profile File opened for modification /root/.bashrc File opened for modification /root/.profile -
Modifies Bash startup script 1 TTPs 4 IoCs
description ioc File opened for modification /root/.profile File opened for modification /home/user/.bashrc File opened for modification /home/user/.profile File opened for modification /root/.bashrc
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
251B
MD5084da399ef187c8d606464bdb2ac04bd
SHA1ba5c5b5cbd6abdf64131722240703fb585ee8b56
SHA2563ad51a3a062aaee8aa425f5ee258d56033eb70c6ce8c01797543e0c99e400daa
SHA512c09509484418a9748d453bd37d6de773ac50712a7d39ba70fa834f6459d5a0f3af4d5180626b36ef7fcd22787e064c2a25b654f316e6a9ffe023c6b3bd018eab