Resubmissions

23/01/2024, 17:33

240123-v4y6qadedp 6

23/01/2024, 16:54

240123-vehsfachdq 6

General

  • Target

    bin.armv7l

  • Size

    117KB

  • Sample

    240123-v4y6qadedp

  • MD5

    07d0a458830a52f9cf7556307f646cc7

  • SHA1

    262b5b82a457eb135a2bc572f0a9339aa8ef2d65

  • SHA256

    892419180ca9f9d352df45baf01daadc646ad03d248f1cf0feeffb28559a2447

  • SHA512

    f889dac08f0e800d2f5ce63ba2ab7d2c77922da1432178a1dce30879bb8eefc58cec0487a9821166681fd42433beb16d8d2a8132714c6aeef2bfa07ac03ba197

  • SSDEEP

    3072:ZyR1weNyv/nuyTyDNjouX/Ta06d1LPbyWGsb3wBH:Zy1wiSTuDNj/vTa06d1LPbvNwBH

Score
6/10

Malware Config

Targets

    • Target

      bin.armv7l

    • Size

      117KB

    • MD5

      07d0a458830a52f9cf7556307f646cc7

    • SHA1

      262b5b82a457eb135a2bc572f0a9339aa8ef2d65

    • SHA256

      892419180ca9f9d352df45baf01daadc646ad03d248f1cf0feeffb28559a2447

    • SHA512

      f889dac08f0e800d2f5ce63ba2ab7d2c77922da1432178a1dce30879bb8eefc58cec0487a9821166681fd42433beb16d8d2a8132714c6aeef2bfa07ac03ba197

    • SSDEEP

      3072:ZyR1weNyv/nuyTyDNjouX/Ta06d1LPbyWGsb3wBH:Zy1wiSTuDNj/vTa06d1LPbvNwBH

    Score
    6/10
    • Creates/modifies Cron job

      Cron allows running tasks on a schedule, and is commonly used for malware persistence.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Modifies init.d

      Adds/modifies system service, likely for persistence.

    • Modifies systemd

      Adds/ modifies systemd service files. Likely to achieve persistence.

    • Write file to user bin folder

MITRE ATT&CK Enterprise v15

Tasks