Overview

overview

7

Static

static

1

mal

debian-9-armhf

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    mal

  • Size

    86KB

  • Sample

    231111-k34ppscg6v

  • MD5

    060295fd9e3a42449703524d9c184f96

  • SHA1

    3b518191a06d94bbd7e379f27e0fd4115e803d65

  • SHA256

    c7273e87c151953c82ce1081ed170630a51082d6f2f2ee36853a21cbe399b019

  • SHA512

    2ab9ec7833b11cf9959a8f484a438aee404faa94721281a692e18b13e27f4868310c285d751b7169073a862340a66c7a2a7536014cc002f298393598863dbb6c

  • SSDEEP

    1536:Ua4MyBX7SpHqoLwYtUeiLBrlqZ03sOAznRV7VFHockQEXUt/IEtXvMxMRYYOd1/S:UWyBX74qMKbO03I7fuGINNYO7/xbk

Score
7/10

Malware Config

Targets

    • Target

      mal

    • Size

      86KB

    • MD5

      060295fd9e3a42449703524d9c184f96

    • SHA1

      3b518191a06d94bbd7e379f27e0fd4115e803d65

    • SHA256

      c7273e87c151953c82ce1081ed170630a51082d6f2f2ee36853a21cbe399b019

    • SHA512

      2ab9ec7833b11cf9959a8f484a438aee404faa94721281a692e18b13e27f4868310c285d751b7169073a862340a66c7a2a7536014cc002f298393598863dbb6c

    • SSDEEP

      1536:Ua4MyBX7SpHqoLwYtUeiLBrlqZ03sOAznRV7VFHockQEXUt/IEtXvMxMRYYOd1/S:UWyBX74qMKbO03I7fuGINNYO7/xbk

    Score
    7/10

    • Changes its process name

    • Deletes itself

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    behavioral1

MITRE ATT&CK Matrix

Tasks