Resubmissions

05/03/2024, 14:53

240305-r9hjdaad44 6

05/03/2024, 14:39

240305-r1j1vahb3t 7

05/03/2024, 14:34

240305-rxstksha4v 7

General

  • Target

    bin.x86_64

  • Size

    164KB

  • Sample

    240305-r9hjdaad44

  • MD5

    8c94a74d01e85e9d4010e0bebfa7a290

  • SHA1

    ef7957c141ed469dccb5609829fc67d8e48b41c3

  • SHA256

    f4b72e0f7fcf2d321bedf0e499276ef5605c25531f4f0c431c80b0f5ddb7723d

  • SHA512

    261e50b1baa54641a6ddd89f7faf11d490071d6dc8c34a90ce075cbc0196e641479280f62fd0db89c244b1fff6aeebacf1f02d18b818a2f10654f8f333087a83

  • SSDEEP

    3072:8TGeD+7/2oGATdlpZ1ywJdxiElZ1mAi+b//o1ZD2SDVk6Lwvqd4:sG9hRQL+b/

Score
6/10

Malware Config

Targets

    • Target

      bin.x86_64

    • Size

      164KB

    • MD5

      8c94a74d01e85e9d4010e0bebfa7a290

    • SHA1

      ef7957c141ed469dccb5609829fc67d8e48b41c3

    • SHA256

      f4b72e0f7fcf2d321bedf0e499276ef5605c25531f4f0c431c80b0f5ddb7723d

    • SHA512

      261e50b1baa54641a6ddd89f7faf11d490071d6dc8c34a90ce075cbc0196e641479280f62fd0db89c244b1fff6aeebacf1f02d18b818a2f10654f8f333087a83

    • SSDEEP

      3072:8TGeD+7/2oGATdlpZ1ywJdxiElZ1mAi+b//o1ZD2SDVk6Lwvqd4:sG9hRQL+b/

    Score
    6/10
    • Creates/modifies Cron job

      Cron allows running tasks on a schedule, and is commonly used for malware persistence.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Modifies init.d

      Adds/modifies system service, likely for persistence.

    • Modifies systemd

      Adds/ modifies systemd service files. Likely to achieve persistence.

    • Write file to user bin folder

MITRE ATT&CK Enterprise v15

Tasks