Overview

overview

10

Static

static

10

6a7b7147fe...02.elf

ubuntu-18.04-amd64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    blackmatter (1) (1).zip

  • Size

    741KB

  • Sample

    231011-dbhjtscb37

  • MD5

    ee7a2766e07207fd489c3587688174aa

  • SHA1

    191edf9d2e4af65d5d7d0c5ce7f14479449ba215

  • SHA256

    58a856e39db5fe3055f7da6994222cdfbb4d67b5b88935f9fd51ca4241d7bb28

  • SHA512

    1a2faa57ba86cd2c4f196282a54bff79a8fd86f2cdae5848612883f375496f0fc5f84349273e0217078340e042d59b196490117fa38515bcdec87e60fec76c09

  • SSDEEP

    12288:l+kV/Ycu+pJWwBAlFvlGokdHrPUF53+sR2AfY6gVolJY5C3+7pHGX06WdOzJcy4J:l+kRYfiJhBilSr8FZ+DA+onY5xlH20Lf

Score
10/10
blackmatterbab21ee475b52c0c9eb47d23ec9ba1d1linux

Malware Config

Extracted

Family

blackmatter

Version

1.6.0.2

Botnet

bab21ee475b52c0c9eb47d23ec9ba1d1

C2

http://paymenthacks.com

http://mojobiden.com
rsa_pubkey.plain
aes.plain

Targets

    • Target

      6a7b7147fea63d77368c73cef205eb75d16ef209a246b05698358a28fd16e502.elf

    • Size

      2.0MB

    • MD5

      3f9a28e8c057e7ea7ccf15a4db81f362

    • SHA1

      10d6d3c957facf06098771bf409b9593eea58c75

    • SHA256

      6a7b7147fea63d77368c73cef205eb75d16ef209a246b05698358a28fd16e502

    • SHA512

      58a71aeac247d206f023ee29aff81026881e41d3fbd268f7513e3bcd951701a68502361dd717befa79a094eb9fc0caaa9f8770ba83f5c94a8acb9ae0986ee386

    • SSDEEP

      49152:k5Wy/20shMXR8uUz9cBbLc/6LCM01iNFFB9wO:k5Wy//sO8uDq6

    Score
    7/10

    • Deletes itself

    • Reads CPU attributes

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks