d6cfac34be9c6298e9e73a8377ae4b2ff9de7d2bf58eb00aa849833313dccd94 | Triage

Sharing

General

Target

724fa59db0e8e169cbc316c3ec69c5e3
Size

416KB
Sample

240403-hqq7qsah44
MD5

724fa59db0e8e169cbc316c3ec69c5e3
SHA1

e74319d44c0a2980ec37da01727e218567144651
SHA256

d6cfac34be9c6298e9e73a8377ae4b2ff9de7d2bf58eb00aa849833313dccd94
SHA512

ed552d18d405ff0a3524538b6077068460908a2e945ac9fac78b4cda963153eca654dc91b1c89dfc679cd99a6250b3929df56bfd561faa594c176a73869a94c2
SSDEEP

3072:0BADestwmT/evCGOpOKx7ti+UxHez1PUwEEkGomBIYZzZ:0ytwmyvCLF7ti9k1ce1omBIYZzZ

Score

9^/10

discovery linux

Malware Config

Targets

- Target
  
  724fa59db0e8e169cbc316c3ec69c5e3
- Size
  
  416KB
- MD5
  
  724fa59db0e8e169cbc316c3ec69c5e3
- SHA1
  
  e74319d44c0a2980ec37da01727e218567144651
- SHA256
  
  d6cfac34be9c6298e9e73a8377ae4b2ff9de7d2bf58eb00aa849833313dccd94
- SHA512
  
  ed552d18d405ff0a3524538b6077068460908a2e945ac9fac78b4cda963153eca654dc91b1c89dfc679cd99a6250b3929df56bfd561faa594c176a73869a94c2
- SSDEEP
  
  3072:0BADestwmT/evCGOpOKx7ti+UxHez1PUwEEkGomBIYZzZ:0ytwmyvCLF7ti9k1ce1omBIYZzZ
Score

9^/10

discovery
- Contacts a large (8323) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
- Changes its process name
- Deletes itself
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1