Overview

overview

10

Static

static

10

7b75ce1d60...8e9ab7

ubuntu-18.04-amd64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    7b75ce1d60d3c38d7eb63627e4d3a8c7e6a0f8f65c70d0b0cc4756aab98e9ab7
  • Size 91KB
  • Sample260212-rp93wset2d
  • SHA256 7b75ce1d60d3c38d7eb63627e4d3a8c7e6a0f8f65c70d0b0cc4756aab98e9ab7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
ghostpenguinlinux

Malware Config

Extracted

Family

  • ghostpenguin

C2

  • 65.20.72.101:53

Targets

    • Target
      7b75ce1d60d3c38d7eb63627e4d3a8c7e6a0f8f65c70d0b0cc4756aab98e9ab7
    • Size 91KB
    • SHA256 7b75ce1d60d3c38d7eb63627e4d3a8c7e6a0f8f65c70d0b0cc4756aab98e9ab7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    behavioral1

MITRE ATT&CK Matrix

Tasks