General

  • Target

    e5d877ae770422186c9ef7b3576db90e.bin

  • Size

    66KB

  • Sample

    240115-eee4jsghaj

  • MD5

    50eef82f004aab5d2cac4fad1059c894

  • SHA1

    1fb76f13b4a702cebedd72be4c6ebcab56c11e1c

  • SHA256

    04680e137acf5c2273af70f80af2053e18655d81c21988713de7a502e5586741

  • SHA512

    187e361054e966ea9bd657c90cf2cceb711c37566b6b1214abc85b98210342eb4505447e1f3f458d09d0d331014b2a33a5f8a18f095fc6665baeb9048397e20c

  • SSDEEP

    1536:JrpcAPs9dxQvQaKMDUhuVYfsqLXmAmDCGy2kXf16+eYZMK+r8361tE673VS:VCOIfrhuesKWAmzyBdze4+WQE6DQ

Score
10/10

Malware Config

Targets

    • Target

      951562949ed8a594ff97e181ba5bdae14b0c6fd58d0fa1ea817bb0b01302246d.elf

    • Size

      189KB

    • MD5

      e5d877ae770422186c9ef7b3576db90e

    • SHA1

      887838e67ebe66e95b24799bd92f3216d20c8318

    • SHA256

      951562949ed8a594ff97e181ba5bdae14b0c6fd58d0fa1ea817bb0b01302246d

    • SHA512

      64155149eb3d50619b72786475b25974a164294eaf2af1ef5983676535b4b36cd5f2ddf59a57f4ed71ba0b19c72b8d56f419d99124d077073343f1b6afccadbd

    • SSDEEP

      3072:vcGY9Rk0EetiL8KaAtahZ/f8C5kTF20WDnNcSGMAo:vxY9JiLpk9b5kI0qnuSJN

    Score
    9/10
    • Contacts a large (119753) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Changes its process name

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks