General

  • Target

    ex.sh

  • Size

    2KB

  • Sample

    230701-kdwb2agc92

  • MD5

    c3b641509084438db6e1ab8be9e82990

  • SHA1

    73389eb6d835c8f9c6fb211e3727852222487f61

  • SHA256

    5b3e62c73008cded70fc70f1044c60a3caad8385d146bf5f5b7572ac29c65ca7

  • SHA512

    57630af7209eda6c6a36054aa50e6337373cb792857dadb53008972d75ed46e21a9f77fa2400aae5d5c63ca394dfb87ecc0aea91f4dbfb96192ba7a7e52e557d

Score
7/10

Malware Config

Targets

    • Target

      ex.sh

    • Size

      2KB

    • MD5

      c3b641509084438db6e1ab8be9e82990

    • SHA1

      73389eb6d835c8f9c6fb211e3727852222487f61

    • SHA256

      5b3e62c73008cded70fc70f1044c60a3caad8385d146bf5f5b7572ac29c65ca7

    • SHA512

      57630af7209eda6c6a36054aa50e6337373cb792857dadb53008972d75ed46e21a9f77fa2400aae5d5c63ca394dfb87ecc0aea91f4dbfb96192ba7a7e52e557d

    Score
    7/10
    • Executes dropped EXE

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v6

Tasks