Overview

overview

7

Static

static

1

scan/1

ubuntu-18.04-amd64

1

scan/1

debian-9-armhf

1

scan/1

debian-9-mips

1

scan/1

debian-9-mipsel

1

scan/2

ubuntu-18.04-amd64

1

scan/2

debian-9-armhf

1

scan/2

debian-9-mips

1

scan/2

debian-9-mipsel

1

scan/3

ubuntu-18.04-amd64

1

scan/3

debian-9-armhf

1

scan/3

debian-9-mips

1

scan/3

debian-9-mipsel

1

scan/class

ubuntu-18.04-amd64

1

scan/go

ubuntu-18.04-amd64

7

scan/go

debian-9-armhf

1

scan/go

debian-9-mips

7

scan/go

debian-9-mipsel

7

scan/random

ubuntu-18.04-amd64

1

scan/random

debian-9-armhf

1

scan/random

debian-9-mips

1

scan/random

debian-9-mipsel

1

scan/screen

ubuntu-18.04-amd64

scan/update

ubuntu-18.04-amd64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7d232698d87f0320e25e6a77dcaf107c

  • Size

    699KB

  • Sample

    231222-kbml4sfce9

  • MD5

    7d232698d87f0320e25e6a77dcaf107c

  • SHA1

    2d063535951b3965851286e97c7e41494929b47d

  • SHA256

    8ff25cb03dc615fe8595b1acdc4c3e868a1a31a615801842d1417e84e73b2d71

  • SHA512

    e43802c0b6ffa6361a64134d3ecb0fa78061532aff74f23dd6ff3b7e26c3fa3b2017a539e7a4a6e35f2a63940ab5d0397cf581b6db54ca542fbfaae145ca7ef5

  • SSDEEP

    12288:K6K/0sLvLSY8NPjV62itRy5YEGMyc3LHx/JTZ8SJSwIy2GLWTwc+O:DQzHSYSjV6ptRdEGMycLTZjSNTpl

Score
7/10
evasionlinux

Malware Config

Targets

    • Target

      scan/1

    • Size

      189B

    • MD5

      2d5ccac709b948148acd7c7e8b812481

    • SHA1

      1fe3d4b06c1bced4289542629a3af770ef9bff9d

    • SHA256

      246fcc88606c73771e9ccfed22be1ee97636f65156b1076db2e506e16e732db3

    • SHA512

      b677ea3f7cc1f0893de5c0ace03ce21628cdf6d7ec1f84e3c5f2118bd09769b054e0c520dbf3fdbb8f85e9ff384f07ccb6d98c9fabbcbb0e6051a37615effe93

    Score
    1/10
    behavioral1behavioral2behavioral3behavioral4

    • Target

      scan/2

    • Size

      119B

    • MD5

      72918ad72cbd27a984298570d01553b8

    • SHA1

      ef14c4e5e7ee8ddd71c0802b0176ba915dd8d3fc

    • SHA256

      42237dd0eeacbddd1e07df21cd437cdf9c1b0282ac7b565d51589e57b39bffd1

    • SHA512

      4980d4fe3910dd6139aad4862f0955b11c3ffd5925419f75353de1163955697cbf7b0ae277b769fcd6dd2993ea0a92ad48ea0e555cb2527a56ae710ed7fad12a

    Score
    1/10
    behavioral5behavioral6behavioral7behavioral8

    • Target

      scan/3

    • Size

      187B

    • MD5

      cb90af51fd90ecacbe92ac9a4fb897f0

    • SHA1

      a5993435d5dd45db0adb315b888aac35b8f4598e

    • SHA256

      c2c5e4a271f8af56df3c091397e9db498f48434001e3d8b7e63cadd902e5adc9

    • SHA512

      524493a68d594982f59f16311157a8f2efcd500355784d0335e452e1a991a81861c1acb92b7a2d9c4b75a529971cd71147dc3441ec9524ec6a5d1ecc555468eb

    Score
    1/10
    behavioral10behavioral11behavioral12behavioral9

    • Target

      scan/class

    • Size

      443KB

    • MD5

      b51a52c9c82bb4401659b4c17c60f89f

    • SHA1

      b45ae5d8d3069ee7f880dd461c931fa711b6ad3d

    • SHA256

      97093a1ef729cb954b2a63d7ccc304b18d0243e2a77d87bbbb94741a0290d762

    • SHA512

      600c956d612b9b59d9846d5e83c009b6bac646ef2ba763dd54126ddf2e1a2c86c70960dbc9f836e6cbd6c7296c3f1801151a1548af904c61375d096c23aa0f68

    • SSDEEP

      6144:gIM21beIrQCxAeQmnT3V3xNNZkYgy2CZTLdUyh:NdbeIrT9QmbVDNZkMZLdUq

    Score
    1/10
    behavioral13

    • Target

      scan/go

    • Size

      794B

    • MD5

      fd52040029cde6318569f91abc1090fc

    • SHA1

      65117e69cfc77df7db1d0695eb66903093e2e397

    • SHA256

      150ad9bc0078b993db48ed0d373723df82c89e23c3d1dcfb795aac3f5853a5cc

    • SHA512

      5f707d39c2494cf7bc41acc3a5402d1442ab12c4cc2c73c9f15dedac7e9d37d25a01119a02887e442bdeaacc3f3290b6dd33f1c5cdbbca011df140c11ce129f7

    Score
    7/10
    evasion

    • Deletes Audit logs

      Deletes logs related to the Linux Audit framework.

      evasion

    • Deletes journal logs

      Deletes systemd journal logs. Likely to evade detection.

      evasion

    • Deletes system logs

      Deletes log file which contains global system messages. Adversaries may delete system logs to minimize their footprint.

      evasion

    • Deletes log files

      Deletes log files on the system.

    behavioral14behavioral15behavioral16behavioral17

    • Target

      scan/random

    • Size

      184B

    • MD5

      55f24ce1736dcc999db464d7c47a4d30

    • SHA1

      787b233469d7314b8e9140d77a7cc704ce34b120

    • SHA256

      6d8ffb2449a2e56d63c23e66aa367bd3a610adf96b288dfc8e52bffda15751af

    • SHA512

      14c62fc05c1800b9016302468f8022cc7ea4bfe26f354289a93dbf41d52b389196e196d60db66dc51c52efb7f44e123009ebe77243180a40ed6dbd08ab3b8bad

    Score
    1/10
    behavioral18behavioral19behavioral20behavioral21

    • Target

      scan/screen

    • Size

      244KB

    • MD5

      cbf0f41bbbafb1c2609bedb943be3b36

    • SHA1

      a240a0118739e72ff89cefa2540bf0d7da8f8a6c

    • SHA256

      2413af510a75ada34716165992a425b35f62ba1478f63746502afd8a8a156b80

    • SHA512

      388cdc9f027aeb2b0ca336e5e262472fa8f0782727abe1e7d53723b4c36108e8b71167c06b9e5e7fb6a91ca4c9bc38be5d509ea17645cd1d23e5685307929943

    • SSDEEP

      3072:vgQ7G4bDuK/gBrcsP3a89qIW5OnApX2KnZJ5l8cZZbel8Ur5fURH59UlNmXXPqHw:vg5SSK/DsyZnpXndqWkr5sH54N2fq

    Score
    1/10
    behavioral22

    • Target

      scan/update

    • Size

      822KB

    • MD5

      c7d7e861826a4fa7db2b92b27c36e5e2

    • SHA1

      95a5ff1372f352434525a416570eef4379ebac19

    • SHA256

      8dfe94a1b02d1330886ad4458b32db3da4b872f9c2116657840de499fee5438a

    • SHA512

      c5bf98e94fb0b87cc47b5b32834479c5f02fe75e385153429fcff6bac84e910db80463106fecd338e38174dc7272a6040db2c70cef6a8ddcdf6821c0b5a721ef

    • SSDEEP

      24576:U8dJG9L4f0TYRsbalWjFm4z33bavoZ48ZZ2HQ:dzG9LvDbalG04rb6oZ4cQHQ

    Score
    1/10
    behavioral23

MITRE ATT&CK Enterprise v15

Tasks