General

  • Target

    96ce50158e9a933ff060fbbbca2e5455

  • Size

    384KB

  • Sample

    231220-kjgqtscffp

  • MD5

    96ce50158e9a933ff060fbbbca2e5455

  • SHA1

    de5f2e0caa41bd22d249e6857e63cb38529fb181

  • SHA256

    a89828e4e31eafe2d3c48955df20688ac4f53909b7c145b1db45bc4efcd9c956

  • SHA512

    faffa31d1212b74050dca1addbecafed5d0a635ae3e0bf69937b9eae8517f20a4a0b6f219aa2057d8cd6cefb198f3b4c249934db59fea82bf0075bc1e242bf61

  • SSDEEP

    6144:SH0cwGaZNuEtdb3usKYgoJ4o+dp5ky7+MiM0g+7AwQx9yMl0gXQYjTwk73J:SHZwBTdbFKVy+dp5kG0zRs08QgwGJ

Malware Config

Targets

    • Target

      96ce50158e9a933ff060fbbbca2e5455

    • Size

      384KB

    • MD5

      96ce50158e9a933ff060fbbbca2e5455

    • SHA1

      de5f2e0caa41bd22d249e6857e63cb38529fb181

    • SHA256

      a89828e4e31eafe2d3c48955df20688ac4f53909b7c145b1db45bc4efcd9c956

    • SHA512

      faffa31d1212b74050dca1addbecafed5d0a635ae3e0bf69937b9eae8517f20a4a0b6f219aa2057d8cd6cefb198f3b4c249934db59fea82bf0075bc1e242bf61

    • SSDEEP

      6144:SH0cwGaZNuEtdb3usKYgoJ4o+dp5ky7+MiM0g+7AwQx9yMl0gXQYjTwk73J:SHZwBTdbFKVy+dp5kG0zRs08QgwGJ

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks CPU configuration

      Checks CPU information which indicate if the system is a virtual machine.

    • Modifies init.d

      Adds/modifies system service, likely for persistence.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Write file to user bin folder

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks