88049e1b50b44b4cccdd08eed4e2a030e46645cfcc9d8e443cf5b7f9b217e97f | Triage

Sharing

General

Target

68137434f9be4f746872b13b86bc9f9c
Size

54KB
Sample

231219-3f66esafb8
MD5

68137434f9be4f746872b13b86bc9f9c
SHA1

22674da1287d8b939a6ea08a542b2d9c14ae527e
SHA256

88049e1b50b44b4cccdd08eed4e2a030e46645cfcc9d8e443cf5b7f9b217e97f
SHA512

1c6cb4c5175ebc209b3f7345ce2322a51be54afb743d162aeaaed9df87c78372916d5a9c06ed4531a41a5d677a592974ae2c6bd82895f1679376bda8e2256c3b
SSDEEP

768:psGtHhegbpvcvUFd2Broj8eteE4eivOdTwqoMYeDVM3XitYcdkKVfQVdDSKhzIL:Pt6UFEHUp4BB5teDiqkKVfCzA

Score

9^/10

discovery

Malware Config

Targets

- Target
  
  68137434f9be4f746872b13b86bc9f9c
- Size
  
  54KB
- MD5
  
  68137434f9be4f746872b13b86bc9f9c
- SHA1
  
  22674da1287d8b939a6ea08a542b2d9c14ae527e
- SHA256
  
  88049e1b50b44b4cccdd08eed4e2a030e46645cfcc9d8e443cf5b7f9b217e97f
- SHA512
  
  1c6cb4c5175ebc209b3f7345ce2322a51be54afb743d162aeaaed9df87c78372916d5a9c06ed4531a41a5d677a592974ae2c6bd82895f1679376bda8e2256c3b
- SSDEEP
  
  768:psGtHhegbpvcvUFd2Broj8eteE4eivOdTwqoMYeDVM3XitYcdkKVfQVdDSKhzIL:Pt6UFEHUp4BB5teDiqkKVfCzA
Score

9^/10

discovery
- Contacts a large (60809) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
- Changes its process name
- Modifies Watchdog functionality
  Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
- Writes file to system bin folder
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Hijack Execution Flow

Privilege Escalation

Hijack Execution Flow

Defense Evasion

Hijack Execution Flow

Impair Defenses

Credential Access

Discovery

Network Service Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1