Overview

overview

6

Static

static

1

.python/allb

ubuntu-18.04-amd64

1

.python/allb

debian-9-armhf

6

.python/allb

debian-9-mips

6

.python/allb

debian-9-mipsel

6

.python/c

ubuntu-18.04-amd64

1

.python/oracle

ubuntu-18.04-amd64

1

.python/oracle

debian-9-armhf

1

.python/oracle

debian-9-mips

1

.python/oracle

debian-9-mipsel

1

.python/postgres

ubuntu-18.04-amd64

1

.python/postgres

debian-9-armhf

1

.python/postgres

debian-9-mips

1

.python/postgres

debian-9-mipsel

1

.python/prg

ubuntu-18.04-amd64

1

.python/prg

debian-9-armhf

1

.python/prg

debian-9-mips

1

.python/prg

debian-9-mipsel

1

.python/pscan

ubuntu-18.04-amd64

1

.python/rand

ubuntu-18.04-amd64

1

.python/rand

debian-9-armhf

1

.python/rand

debian-9-mips

1

.python/rand

debian-9-mipsel

1

.python/test

ubuntu-18.04-amd64

1

.python/test

debian-9-armhf

1

.python/test

debian-9-mips

1

.python/test

debian-9-mipsel

1

.python/ubuntu

ubuntu-18.04-amd64

1

.python/ubuntu

debian-9-armhf

1

.python/ubuntu

debian-9-mips

1

.python/ubuntu

debian-9-mipsel

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    54b0c6a0028dab122c4357093b7ec020

  • Size

    510KB

  • Sample

    231222-c6geksggdk

  • MD5

    54b0c6a0028dab122c4357093b7ec020

  • SHA1

    3f4c703c301140423799ee4d95267a9fa75f47d2

  • SHA256

    285572a9f4a1050d435a6e328f1072f0a27be99b15e3024945ae5f9209999d8a

  • SHA512

    bdfdde1dc74a53d0c7fab9813f1daf5dec90d44c72af48eeded276eb23c7cb870039b24288fcda12ab95f36453ded15608079f17fa475ef9c8027e69d0d9bb51

  • SSDEEP

    6144:nIM21beIrQCxAeQmnT3V3xNNZkYgy2CZTLdUyh+G:IdbeIrT9QmbVDNZkMZLdUq

Score
6/10
linux

Malware Config

Targets

    • Target

      .python/allb

    • Size

      1KB

    • MD5

      d8562d823f1531477aed56051c3e616a

    • SHA1

      e5ddd1abb83d031082d713f3b7c8ecb3e19a53d0

    • SHA256

      c96a2a632b23eb6849a539202f995431e9fd5def6cf9a5998419192e2ffb4671

    • SHA512

      ad4b1108d0ff324ec74456ab4d84bfe4cdd2759808ef8fb92a446ace3c1d19956e95b2f8a0896824c13b6c662413dcf0ddb0ca6e333d4366a708f76cb4c87da0

    Score
    6/10

    • Reads CPU attributes

    behavioral1behavioral2behavioral3behavioral4

    • Target

      .python/c

    • Size

      443KB

    • MD5

      b51a52c9c82bb4401659b4c17c60f89f

    • SHA1

      b45ae5d8d3069ee7f880dd461c931fa711b6ad3d

    • SHA256

      97093a1ef729cb954b2a63d7ccc304b18d0243e2a77d87bbbb94741a0290d762

    • SHA512

      600c956d612b9b59d9846d5e83c009b6bac646ef2ba763dd54126ddf2e1a2c86c70960dbc9f836e6cbd6c7296c3f1801151a1548af904c61375d096c23aa0f68

    • SSDEEP

      6144:gIM21beIrQCxAeQmnT3V3xNNZkYgy2CZTLdUyh:NdbeIrT9QmbVDNZkMZLdUq

    Score
    1/10
    behavioral5

    • Target

      .python/oracle

    • Size

      1KB

    • MD5

      479802ea13cf2831af66477aeaad217d

    • SHA1

      6177980a3088f4fec7dea668d3b94f12bca1564b

    • SHA256

      168bda8019db76538375bd67f432c3b91ab28485ddd60ec0f353343178b4a784

    • SHA512

      84e6155ac0e53c43064a1abf28c7219f1f8c0fac454dc9d00276f4f010d278cd7bef4585a65c8d0102951c062e1e7a5ccb9bad05940beeaec25815f122246cd0

    Score
    1/10
    behavioral6behavioral7behavioral8behavioral9

    • Target

      .python/postgres

    • Size

      1KB

    • MD5

      da9cfd0310c267339c2e2b6a3c3f7344

    • SHA1

      154b67af273661d7c77e882572ab65b8accd6406

    • SHA256

      26ec8bbbd2131b1b415d12b95e94eb12c7b5a750ad3a4a0de0f7627a56174b2c

    • SHA512

      ac95b278ae42cfe1f4ccd8cc3a952930cba39d5d70b3f6230748a08a25d263ff8729d12258999d3e4f3c91005ba75183eded56ab0fbc2e901d4fc460976d0788

    Score
    1/10
    behavioral10behavioral11behavioral12behavioral13

    • Target

      .python/prg

    • Size

      11KB

    • MD5

      89f2e176db9ff35c5101184d33a00984

    • SHA1

      75bffcf4811ebc0a2d5563874c3d548ad3318cd3

    • SHA256

      c71a40270d762854c0833d62e977a1d560199ef1ceeaf264829cdd428e7874e4

    • SHA512

      46e30d5236a21ed570a0303fbef2d2796afcd0f9d7a4d31785bf7f496ccf4df2030642030b4ab85bd034bec01ab5baeeb9c5b9d5dee5c3717818c69e1e68ae47

    • SSDEEP

      192:NgEj7vXwkccKnrfvKvAG4WQLcoZMIxmSwXUyXdN0qec5yKWWz7NRIW/ljS8g8gIO:NgE37ccKrfvKK7LcoZMkmSYUyXdN0qH6

    Score
    1/10
    behavioral14behavioral15behavioral16behavioral17

    • Target

      .python/pscan

    • Size

      12KB

    • MD5

      8ead9f4c320fecc5965a88422a235de9

    • SHA1

      cc41a71aa29fbbdb28e9c8337b0091ab54c279fe

    • SHA256

      26c8819cbaff7d17250cb83f37ef6c7aabaa8ee92247a678ecdc29a16c6b944c

    • SHA512

      d8d57f223731ea1d163a409e2f5fc14a5e0ebcd2b4699e82bc87fd3b914a6eeee979ed67f93b8a748dde3770d5c8e4af83f4f1305fbf65d91f15c180e69b1581

    • SSDEEP

      384:wn+ySSSwese0MTBGiuDocejMPlOoLB0wkFYGFU:wpPLese0MTBG/DocejwlOoLB0wkFYgU

    Score
    1/10
    behavioral18

    • Target

      .python/rand

    • Size

      631B

    • MD5

      d6a18b1320902008e72ab762e8468f0c

    • SHA1

      d4043b6a317192847ed014f7bfc21c54f08ae958

    • SHA256

      b99bd73ae06b5305eb7753409fb4b9d2719c4e35428b8315a4f20ffe3b60aa97

    • SHA512

      c843f3ef347d1ea365ecdbb181d53cd1361bc055ab9ba5e1ce075fc05c1a7968c8aeec72e9aa77cf244fd2ba9d1282c06af02e99b2579e5fb222c172fe2f8cbe

    Score
    1/10
    behavioral19behavioral20behavioral21behavioral22

    • Target

      .python/test

    • Size

      1KB

    • MD5

      a9a0fef37ea6973f5dfe2e10ba96d7f8

    • SHA1

      996ef7a87017ccd480b4cd287e0a1d00805c8bea

    • SHA256

      aa3274527237965ae5741c7ba15de36b5629202c2e61595667ad6cfcfb55c2f6

    • SHA512

      421ee425e98192cea9f1c0a9e69dc0cf6b87dea07954faebe1446d25328e1c62492e4a83e43d4cc72d781b1f603dcc26c2eedfda98e8e904d614014600952a49

    Score
    1/10
    behavioral23behavioral24behavioral25behavioral26

    • Target

      .python/ubuntu

    • Size

      1KB

    • MD5

      07f6dd9f5b022262665d8cc0f5037086

    • SHA1

      3466c31fc60279e6758906272fa1724fb71384c2

    • SHA256

      462b92c91fbc63e60ddf7c5dd59b12ec37d7bae767ac2c28b69d928782aae7e4

    • SHA512

      2976d6b23821f5d97d8a07014ea54053391ccfeb074666fd56f900c2fe1f03dd9d3a4f7d6738a5587e4255487f0474985d375fe9420dfd3323722b3265586e13

    Score
    1/10
    behavioral27behavioral28behavioral29behavioral30

MITRE ATT&CK Enterprise v15

Tasks