ec7ff2dc5ac42f99c49ed8131a131dcac92e9038e5d977d848ab981f9d35a0a1 | Triage

Sharing

General

Target

0893bfc6f21c7fd5a0df8ec50d79796a
Size

184KB
Sample

231219-2cj12sfgcp
MD5

0893bfc6f21c7fd5a0df8ec50d79796a
SHA1

ea8a071625cd4073d53fab3d7b17504abb792a89
SHA256

ec7ff2dc5ac42f99c49ed8131a131dcac92e9038e5d977d848ab981f9d35a0a1
SHA512

72466510efc02b2325578dae73ef362abdc3c454ead18ce1713e9e59fe261b3d269101f3965706d18e8a5a2f8affd5ef49c169e5c8c1ea6c6587ff7954a4f235
SSDEEP

3072:Vm1I9RHCimRnPP8y8gZ5lNF/mKjtrt+gf+k9FDp9i56d:Vl9z0P98OT/m+rt+gf+k9FDp9i56d

Score

7^/10

Malware Config

Targets

- Target
  
  0893bfc6f21c7fd5a0df8ec50d79796a
- Size
  
  184KB
- MD5
  
  0893bfc6f21c7fd5a0df8ec50d79796a
- SHA1
  
  ea8a071625cd4073d53fab3d7b17504abb792a89
- SHA256
  
  ec7ff2dc5ac42f99c49ed8131a131dcac92e9038e5d977d848ab981f9d35a0a1
- SHA512
  
  72466510efc02b2325578dae73ef362abdc3c454ead18ce1713e9e59fe261b3d269101f3965706d18e8a5a2f8affd5ef49c169e5c8c1ea6c6587ff7954a4f235
- SSDEEP
  
  3072:Vm1I9RHCimRnPP8y8gZ5lNF/mKjtrt+gf+k9FDp9i56d:Vl9z0P98OT/m+rt+gf+k9FDp9i56d
Score

7^/10
- Changes its process name
- Reads system routing table
  Gets active network interfaces from /proc virtual filesystem.
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1