Overview

overview

10

Static

static

10

2d7d0fe6b4...5f0e37

ubuntu-18.04-amd64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2d7d0fe6b472a12e115f824f0f5f0e37

  • Size

    124KB

  • Sample

    231219-2spw8sdghj

  • MD5

    2d7d0fe6b472a12e115f824f0f5f0e37

  • SHA1

    2870cf5ae3e8f9f2041157547a58718bcc450826

  • SHA256

    9985b3c8e6bbc2b7cdaa794e0396aa99146b4319a55be14375156f0187446f6b

  • SHA512

    1cfe5e1ab5c93f923122f1e2b177ea36610d5963476587a3edbd6cfe15509a5b488e586114425b1851c7ae0b41d9f3d5ff6c317e1a93d8514fe973087422ad0f

  • SSDEEP

    3072:EXcZgT5E0HR9nRDGoRcQ+Ixf3siG3553hjD9oY4giAGaJpP:EXcZ6E0HR1vcMRG355RjD9oY4giAGaJ9

Score
10/10
gafgytdiscoverylinux

Malware Config

Targets

    • Target

      2d7d0fe6b472a12e115f824f0f5f0e37

    • Size

      124KB

    • MD5

      2d7d0fe6b472a12e115f824f0f5f0e37

    • SHA1

      2870cf5ae3e8f9f2041157547a58718bcc450826

    • SHA256

      9985b3c8e6bbc2b7cdaa794e0396aa99146b4319a55be14375156f0187446f6b

    • SHA512

      1cfe5e1ab5c93f923122f1e2b177ea36610d5963476587a3edbd6cfe15509a5b488e586114425b1851c7ae0b41d9f3d5ff6c317e1a93d8514fe973087422ad0f

    • SSDEEP

      3072:EXcZgT5E0HR9nRDGoRcQ+Ixf3siG3553hjD9oY4giAGaJpP:EXcZ6E0HR1vcMRG355RjD9oY4giAGaJ9

    Score
    9/10
    discovery

    • Contacts a large (70701) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Changes its process name

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks