Overview

overview

10

Static

static

10

95d79a8471...b7ab31

ubuntu-18.04-amd64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    95d79a84717131ee31259cecfdb7ab31

  • Size

    54KB

  • Sample

    231220-ke8czsfdc7

  • MD5

    95d79a84717131ee31259cecfdb7ab31

  • SHA1

    b3fe88c1cbf6b04164f4af410db9ae6166adcf4b

  • SHA256

    b92673c1d731425b61da34933fa398a5eb4e3221b6e995a889d1f01b1d2912c1

  • SHA512

    420b60d6039fef8a14962f4a5cb600dfaf27efcc8a4db6f8ce5b2239efff0b2dc4b77797adeac99f875352759979ec4635d2ad3b2f6296a03a62dc49d1f6d50f

  • SSDEEP

    768:dZCOH7Nq8o+FhqF4Ie6UjHKtpvkBABSQYrHROd3ku2VVkfVYMgwne383TkulhIZG:3CMhvqCUUjqt5BW9q3F2jkswefulh

Score
10/10
miraidiscoverylinux

Malware Config

Targets

    • Target

      95d79a84717131ee31259cecfdb7ab31

    • Size

      54KB

    • MD5

      95d79a84717131ee31259cecfdb7ab31

    • SHA1

      b3fe88c1cbf6b04164f4af410db9ae6166adcf4b

    • SHA256

      b92673c1d731425b61da34933fa398a5eb4e3221b6e995a889d1f01b1d2912c1

    • SHA512

      420b60d6039fef8a14962f4a5cb600dfaf27efcc8a4db6f8ce5b2239efff0b2dc4b77797adeac99f875352759979ec4635d2ad3b2f6296a03a62dc49d1f6d50f

    • SSDEEP

      768:dZCOH7Nq8o+FhqF4Ie6UjHKtpvkBABSQYrHROd3ku2VVkfVYMgwne383TkulhIZG:3CMhvqCUUjqt5BW9q3F2jkswefulh

    Score
    9/10
    discovery

    • Contacts a large (23517) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Changes its process name

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks