Overview

overview

6

Static

static

1

.kde/a

ubuntu-18.04-amd64

1

.kde/a

debian-9-armhf

1

.kde/a

debian-9-mips

1

.kde/a

debian-9-mipsel

1

.kde/a1

ubuntu-18.04-amd64

.kde/auto.js

windows7-x64

1

.kde/auto.js

windows10-2004-x64

1

.kde/gen-pass.sh

ubuntu-18.04-amd64

1

.kde/gen-pass.sh

debian-9-armhf

1

.kde/gen-pass.sh

debian-9-mips

1

.kde/gen-pass.sh

debian-9-mipsel

1

.kde/go.sh

windows7-x64

3

.kde/go.sh

windows10-2004-x64

3

.kde/pscan2

ubuntu-18.04-amd64

.kde/ss

ubuntu-18.04-amd64

1

.kde/ssh-scan

ubuntu-18.04-amd64

1

.kde/start

ubuntu-18.04-amd64

6

.kde/start

debian-9-armhf

6

.kde/start

debian-9-mips

6

.kde/start

debian-9-mipsel

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    70f4079bd635c52543f6269ce701a388

  • Size

    1.2MB

  • Sample

    231222-f2mycahdbl

  • MD5

    70f4079bd635c52543f6269ce701a388

  • SHA1

    32b17b25f744e861ebefa97dc598aa364c6f1d99

  • SHA256

    d6f0098f74a0481d5885f9a61f03ecbf302ae0fc18ca286b894591eb45adaac3

  • SHA512

    8a6254e96ceeb412968a3e367fcde59af2364d57a85e20bc568bb591ba47323002cb646ec885174af1e8b5dba75647697884653b75ef4abe787399d69835c848

  • SSDEEP

    24576:3Vzo7vnoCpBIKma3d+53/ROPSf23mUdl1G7vtbjwSa2zyyqQWh5lT80:lzmnrpKKmmQ/R+X1lk7ljJagqn5180

Score
6/10
linux

Malware Config

Targets

    • Target

      .kde/a

    • Size

      355B

    • MD5

      3b6db1413874b1330b9023a795deaa3d

    • SHA1

      413e014b2f58daf8d1599a0b0480aa53bbfa22e7

    • SHA256

      047b8058775929f7cb0fe6d0e752c6fb3ed4965667abfabc021f21200cc15201

    • SHA512

      d478d6b60675ef7c5a6cdf27443c7faaa5c0df3856623b4c112d6c7be1997f9e375062e04790e21392754ec8e9411f651e1e421d1f94d9954b77cfd236ad1f37

    Score
    1/10
    behavioral1behavioral2behavioral3behavioral4

    • Target

      .kde/a1

    • Size

      17KB

    • MD5

      2c40b0d96786cbd37f902ad8d45219b7

    • SHA1

      3ecaa91e0f127f8d99c746a2830bf32749641268

    • SHA256

      031998028c05f2715fef4199da3dbca1bd625c19191249dca783832723341586

    • SHA512

      a6500c5df56ddc3507dfd2bcac1b805ce2fbaf317a70b48878c3933363d7c251fe5946583dceca14b661ba15ffb2ba6f562fd95ed5e1340f9826340cf22c21c3

    • SSDEEP

      384:fbvNdMbe+ZzHJN7jZCnfJ9b5WTEiJmHxqL:z1CbZZDn7jZCfvDiJmRqL

    Score
    1/10
    behavioral5

    • Target

      .kde/auto

    • Size

      206B

    • MD5

      5da42fdacd2879b6e6e79143f1d8585a

    • SHA1

      6f32aaef286eac8d0a2df9bafbf840b74f60091f

    • SHA256

      9b1ba5c5121b6da67e984db6ecca9235c58fe6bb0545aa70297917fddf5e6ed4

    • SHA512

      c5638b22e7a0431ec344f9b33e17955f166668a897b92b37984563b381c64a1da24788cc57f24f5ee677c8fa052ebd59db1ba3d075a92ee58f7763a0db72c03f

    Score
    1/10
    behavioral6behavioral7

    • Target

      .kde/gen-pass.sh

    • Size

      265B

    • MD5

      615c08bb1acdf2f21490450991766187

    • SHA1

      6fca943c9d31ef25cd9263e576021206943c03d5

    • SHA256

      e7031aaa218f814ec442f7fc5cc545980a537d777db491c425d60f0be3366074

    • SHA512

      5cc82a0ba4ce23d6598a719fff2406456a9b8708cfd25572044b180ad3bc64365da3dc2b39e07c357bcb7e9a5706db752dc770524410321e9c06fb9d19d6930b

    Score
    1/10
    behavioral10behavioral11behavioral8behavioral9

    • Target

      .kde/go.sh

    • Size

      92B

    • MD5

      3c56bd3a394c1a842ec57226d8ee5d81

    • SHA1

      6f6e89470902060cc2ac227772336772ec77e040

    • SHA256

      384d6253d953a4f9888e82111e910411cefed433b2db8dac89a7befb814b15fd

    • SHA512

      336d8907751f9a839533288e566de1567434947b2d145a240a0935e81935440f3bebdd0288b42537d163aa291166602a5bdbe494d3c11aada651a9e0a7f1385f

    Score
    3/10
    behavioral12behavioral13

    • Target

      .kde/pscan2

    • Size

      20KB

    • MD5

      acba0143d0cbcf8092b8b44d914d7983

    • SHA1

      dd78792e0efcc8b116341538084f64a19e291432

    • SHA256

      cc3f6c535787c71bed14ec8ac3b6feb59fe3b09fc53c69f1fe592103f2632764

    • SHA512

      d3f761e04b4bb178d586e8ce6d4bdf845d9144609fa62637ddc1333fa302574cfcb071873b14140d81e5271f52b17fdac2c1fb870702bdf00e44ae2a22acade1

    • SSDEEP

      384:fuUyGp50UZlh5aLhOBbdbFsc8aApFW60Vfo:W5CtHaLhOBbdb2c8aApFkBo

    Score
    1/10
    behavioral14

    • Target

      .kde/ss

    • Size

      443KB

    • MD5

      b51a52c9c82bb4401659b4c17c60f89f

    • SHA1

      b45ae5d8d3069ee7f880dd461c931fa711b6ad3d

    • SHA256

      97093a1ef729cb954b2a63d7ccc304b18d0243e2a77d87bbbb94741a0290d762

    • SHA512

      600c956d612b9b59d9846d5e83c009b6bac646ef2ba763dd54126ddf2e1a2c86c70960dbc9f836e6cbd6c7296c3f1801151a1548af904c61375d096c23aa0f68

    • SSDEEP

      6144:gIM21beIrQCxAeQmnT3V3xNNZkYgy2CZTLdUyh:NdbeIrT9QmbVDNZkMZLdUq

    Score
    1/10
    behavioral15

    • Target

      .kde/ssh-scan

    • Size

      822KB

    • MD5

      a213ebd69fbc11d612d0374b373f65d8

    • SHA1

      4f64a5b07b0c128771ea21bf4aa15610fc6b071c

    • SHA256

      93df64cc0ff902ad1e80ada56023610ec2c44c3ecde2d36d37a3a748c7fd42bd

    • SHA512

      eb1f005984d50cfd40f26730e8206d9455c1f3560ba90338019911987d2c401e93e70c7565ac68c291a19e04d346fc01cc7b8eaa57942bbcad5d64ab543ad5a3

    • SSDEEP

      24576:U8dJG9L4f0TYRsbalWjFm4z33bavoZ4UZZ2HQ:dzG9LvDbalG04rb6oZ4EQHQ

    Score
    1/10
    behavioral16

    • Target

      .kde/start

    • Size

      5KB

    • MD5

      bc7c80bf1fa56259a6c8969c563518ab

    • SHA1

      130c897ecbc3955ad9a998e1f146dbfb1f21713f

    • SHA256

      62270b2e715152a37dd72455d3bdf374c214c8a7cfc8f391cfafa2d65d1646a5

    • SHA512

      4fc6724575496160e1a4948f137a7133ffe6fea7761155faebaff8ecb7056fe3dc310fa9e6807881569e144fa530347ea7c4851864b6949ba5b8697313efdb4b

    • SSDEEP

      96:uyuYPRHzp8zW9wnqd+9I6bIVrKhI/uVcTa6bEkIev45Cj5MDmNA36anw9Wz8pyft:w9zbWm

    Score
    6/10

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Reads CPU attributes

    behavioral17behavioral18behavioral19behavioral20

MITRE ATT&CK Enterprise v15

Tasks