Overview

overview

10

Static

static

10

6a7b7147fe...02.elf

ubuntu-18.04-amd64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6a7b7147fea63d77368c73cef205eb75d16ef209a246b05698358a28fd16e502.zip

  • Size

    741KB

  • Sample

    231018-jr9wxacd8z

  • MD5

    e02ba505faa33cb401fb1d2bdb194922

  • SHA1

    b54ba732e22e1f6282a35d16afab300f7152a0a8

  • SHA256

    f2f6174d69add2c99656feb9b7ba431ede3781c3675573ff3b6db2bcaba952fc

  • SHA512

    08fbc4e7ceeee61c16dffb2e5b7cb519757bfaa67bd80184ccb0f9678a3ae603a13c6257a5e5ee294f2d278ab8bc97fc8250f3382c69cde423d04c3b2470ea66

  • SSDEEP

    12288:yrqL460Jba9jbOavLra2zEr2oL6jilE55gsr5QprVGL1OWoq+5OMVl+JpLj1kMdD:4g4ZxInkQi+5gtULnoMqwpX1k6

Score
10/10
blackmatterbab21ee475b52c0c9eb47d23ec9ba1d1linux

Malware Config

Extracted

Family

blackmatter

Version

1.6.0.2

Botnet

bab21ee475b52c0c9eb47d23ec9ba1d1

C2

http://paymenthacks.com

http://mojobiden.com
rsa_pubkey.plain
aes.plain

Targets

    • Target

      6a7b7147fea63d77368c73cef205eb75d16ef209a246b05698358a28fd16e502.elf

    • Size

      2.0MB

    • MD5

      3f9a28e8c057e7ea7ccf15a4db81f362

    • SHA1

      10d6d3c957facf06098771bf409b9593eea58c75

    • SHA256

      6a7b7147fea63d77368c73cef205eb75d16ef209a246b05698358a28fd16e502

    • SHA512

      58a71aeac247d206f023ee29aff81026881e41d3fbd268f7513e3bcd951701a68502361dd717befa79a094eb9fc0caaa9f8770ba83f5c94a8acb9ae0986ee386

    • SSDEEP

      49152:k5Wy/20shMXR8uUz9cBbLc/6LCM01iNFFB9wO:k5Wy//sO8uDq6

    Score
    7/10

    • Deletes itself

    • Reads CPU attributes

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks