Overview

overview

8

Static

static

1

45f345dd82...5179d2

ubuntu-18.04-amd64

8

45f345dd82...5179d2

debian-9-armhf

8

45f345dd82...5179d2

debian-9-mips

7

45f345dd82...5179d2

debian-9-mipsel

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    45f345dd8221ca7d1d2e9222f55179d2
  • Size 97KB
  • Sample231226-am723scheq
  • SHA256 54c48edfc4b9ad5b5b4e97842ed5c269374b77759b1a5bef654df3089d75311d
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
discoverylinux

Malware Config

Targets

    • Target
      45f345dd8221ca7d1d2e9222f55179d2
    • Size 97KB
    • SHA256 54c48edfc4b9ad5b5b4e97842ed5c269374b77759b1a5bef654df3089d75311d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    8/10
    discovery

    • Contacts a large (1050) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Writes DNS configuration

      Writes data to DNS resolver config file.

    • Reads CPU attributes

    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks