97c41f5b99c3652aa62c89f76b074dceb3f363119673f9897d1ad5a87879e78d | Triage

Sharing

General

Target

ec176ebc15db9364a00e2310100b21f1
Size

109KB
Sample

231220-t8424aehfq
MD5

ec176ebc15db9364a00e2310100b21f1
SHA1

9a741046d785ac6197c30e383a4c2df284138d53
SHA256

97c41f5b99c3652aa62c89f76b074dceb3f363119673f9897d1ad5a87879e78d
SHA512

268909adc59274315be4f330ec3cdb0c9333879461161f69ab0d4f3afa95dabb728be04cc5d9e4e93e4cb94d906472f8c21fc51cf5f65bfc7c0d10b04589c10b
SSDEEP

3072:EbR/YAu5n5Xjv+IeldZPqdhQZ01lqVmZ901XGXg9Px:OJyn5TmnNPqdB1lymZ901XGXg9Px

Score

7^/10

linux

Malware Config

Targets

- Target
  
  ec176ebc15db9364a00e2310100b21f1
- Size
  
  109KB
- MD5
  
  ec176ebc15db9364a00e2310100b21f1
- SHA1
  
  9a741046d785ac6197c30e383a4c2df284138d53
- SHA256
  
  97c41f5b99c3652aa62c89f76b074dceb3f363119673f9897d1ad5a87879e78d
- SHA512
  
  268909adc59274315be4f330ec3cdb0c9333879461161f69ab0d4f3afa95dabb728be04cc5d9e4e93e4cb94d906472f8c21fc51cf5f65bfc7c0d10b04589c10b
- SSDEEP
  
  3072:EbR/YAu5n5Xjv+IeldZPqdhQZ01lqVmZ901XGXg9Px:OJyn5TmnNPqdB1lymZ901XGXg9Px
Score

7^/10
- Changes its process name
- Reads system routing table
  Gets active network interfaces from /proc virtual filesystem.
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1