General

  • Target

    9439173a2353d9dda2da5d75e953b56f

  • Size

    49KB

  • Sample

    231220-j7vf6abefl

  • MD5

    9439173a2353d9dda2da5d75e953b56f

  • SHA1

    dc9d118d4819c44073812e10ecd25a32546af51c

  • SHA256

    7bd284f4da09d3a95472a66e0867d778eeb59ed54738f6fb6e417e93c0b65685

  • SHA512

    f6f943ffd9a667390be26c254a4fff7ddbd7f77ec679bcd836bb4c156f2a5e73a5e0102c576c37bbb2e2a030d0a87660036c9e13723d3b0cd9152c174ccfbbf4

  • SSDEEP

    1536:sLMgHbGkJ/Tuqen8Ehc5uhCmsdESTujvDBe6Ev1ho6:sLHHJTen8EhVhCNObjv1QvI6

Score
9/10

Malware Config

Targets

    • Target

      9439173a2353d9dda2da5d75e953b56f

    • Size

      49KB

    • MD5

      9439173a2353d9dda2da5d75e953b56f

    • SHA1

      dc9d118d4819c44073812e10ecd25a32546af51c

    • SHA256

      7bd284f4da09d3a95472a66e0867d778eeb59ed54738f6fb6e417e93c0b65685

    • SHA512

      f6f943ffd9a667390be26c254a4fff7ddbd7f77ec679bcd836bb4c156f2a5e73a5e0102c576c37bbb2e2a030d0a87660036c9e13723d3b0cd9152c174ccfbbf4

    • SSDEEP

      1536:sLMgHbGkJ/Tuqen8Ehc5uhCmsdESTujvDBe6Ev1ho6:sLHHJTen8EhVhCNObjv1QvI6

    Score
    9/10
    • Contacts a large (23518) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Changes its process name

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks