General

  • Target
    azsxd.x86
  • Size 66KB
  • Sample260603-alaeesft9z
  • SHA256 0d3d2e513043f33923c8538f0d40b246730eb64d685628c28b89b04b6efcabf3
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      azsxd.x86
    • Size 66KB
    • SHA256 0d3d2e513043f33923c8538f0d40b246730eb64d685628c28b89b04b6efcabf3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Contacts a large (31954) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Traces itself

      Traces itself to prevent debugging attempts

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v16

Tasks