Overview

overview

7

Static

static

1

.incoming_...d63962

ubuntu-18.04-amd64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    .incoming_8a20dc9538d63962
  • Size 289KB
  • Sample260623-ptz3dacy4k
  • SHA256 8a20dc9538d639623878a3d3d18d88da8b635ea52e5e2d0c2cce4a8c5a703db1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoverylinux

Malware Config

Targets

    • Target
      .incoming_8a20dc9538d63962
    • Size 289KB
    • SHA256 8a20dc9538d639623878a3d3d18d88da8b635ea52e5e2d0c2cce4a8c5a703db1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discovery

    • Deletes itself

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Matrix

Tasks