General

  • Target
    82dcb68bc62aca8055c5c3d22a4bc328b534ac315206da143d94576882a7cb53.zip
  • Size 1KB
  • Sample260712-2da5jabv61
  • SHA256 41d2b2c876e38599e2ea8e1c1273199d9d4313f8655d7ac811ed0aa27bcbb20c
  • MD5 SHA1 SHA512 TLSH

Malware Config

Targets

    • Target
      82dcb68bc62aca8055c5c3d22a4bc328b534ac315206da143d94576882a7cb53.sh
    • Size 3KB
    • SHA256 82dcb68bc62aca8055c5c3d22a4bc328b534ac315206da143d94576882a7cb53
    • MD5 SHA1 SHA512 TLSH
    • Contacts a large (383598) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

    • Executes dropped EXE

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks