General

  • Target

    d7929972ed8714b8d8eb92f97a39e9a1

  • Size

    891KB

  • Sample

    240320-bt375sdc96

  • MD5

    d7929972ed8714b8d8eb92f97a39e9a1

  • SHA1

    23e862d6509ea33da8de58fe0b1669fbe11a0fae

  • SHA256

    4d874d2d07fb4bf1cd523114c162b7971b2b72a29ac5b6e44de362774f8252df

  • SHA512

    27b41d4dfdb5f32b55f416c033c06238ab3c4c9424a67d2d0da3f86e367d96c6383c9d340a97027d3fd1c3d16dea988b24ab0a65dd0394d222f9cee7e94a40d4

  • SSDEEP

    24576:zK5RSQFCPrZOOmsTLTQAWeMUYzWRavwYEi:C1clOOlQAWfUF7i

Score
7/10

Malware Config

Targets

    • Target

      d7929972ed8714b8d8eb92f97a39e9a1

    • Size

      891KB

    • MD5

      d7929972ed8714b8d8eb92f97a39e9a1

    • SHA1

      23e862d6509ea33da8de58fe0b1669fbe11a0fae

    • SHA256

      4d874d2d07fb4bf1cd523114c162b7971b2b72a29ac5b6e44de362774f8252df

    • SHA512

      27b41d4dfdb5f32b55f416c033c06238ab3c4c9424a67d2d0da3f86e367d96c6383c9d340a97027d3fd1c3d16dea988b24ab0a65dd0394d222f9cee7e94a40d4

    • SSDEEP

      24576:zK5RSQFCPrZOOmsTLTQAWeMUYzWRavwYEi:C1clOOlQAWfUF7i

    Score
    7/10
    • Changes its process name

    • Flushes firewall rules

      Flushes/ disables firewall rules inside the Linux kernel.

    • Modifies init.d

      Adds/modifies system service, likely for persistence.

MITRE ATT&CK Enterprise v15

Tasks