052fbc43a5d116815b1464378e9f21640cc3a4319a5fd638c76ca1e7a7f41bf8

Sharing

Copy URL Twitter E-mail

General

Target
sssd.zip
Size 3.4MB
Sample260805-pftcnsxbpd
SHA256 052fbc43a5d116815b1464378e9f21640cc3a4319a5fd638c76ca1e7a7f41bf8
MD5 5164f6a3d29e45d613dfd83b9218b474
SHA1 14dd0d04ffd850af0d43af36071f2051cb78f8b6
SHA512 d1871df49cdca41014566566a32550c617d7e5209032530b75b0cf786f25dcee8513220da64526f5aafed7dff6f035e7b0a730a8ec8eae832f603ef7f33b06ca
SSDEEP 49152:ut2EJHW29T6fROHcL9GkBrGB5tWX+QQLJVY1d5+QctROMiP1ZvSXXLcdy7w7KSu1:utHscwkC8G0OUi++Kp
TLSH
T1FDF53A1BE6510C6CC0E1D470DADBDA327D39B4548261362F1E88E5393D4BE692E3FE92
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery linux

Malware Config

Targets

- Target
  libifp_iface.so
- Size 96KB
- SHA256 66c9432c07c8735cc46aa39cd0eae1aa65cd148fc649c13f3bacc344edde1844
- MD5 34f5a77669815cedaf04595156ae4d43
- SHA1 7ef38acfe9c20b1da17d221d33b2c55c2fea9107
- SHA512 074ddd4a92ac547053391cea02624a8109bfce148730636e0dc0ef3b4034791cb3dd2507f6a71bf8ce30efe0e6c1b6dab14ffc417612f0ca890f7dc8cbe35fa8
- SSDEEP 3072:zu/Izp+V78s5NyR5UHX1qkYniPdmIwVnIr0exC/rJNZDZG3igNJyTdERBHJuehjK:gIQYkYniPdmIwVnIr0exC/rJNZDZG3i
- TLSH
  T13FA3A50A6A71857CC1B6C076AC438F31171C7E5156912A2F2FD5907D2D4ABAF2E2FC8B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  libifp_iface_sync.so
- Size 60KB
- SHA256 0bf20b0f2e88afe935168bab3b455aefbbee5e196163b0137e36e3f899bfd155
- MD5 7f9e5e103ba8f63e41b1cb86fd54b35c
- SHA1 b8952c57e1a72cf0c24d48740541e9d98e6bcc19
- SHA512 02123bba26e37d1e8a9d85ea3932a50447dc6ea68fda8a95fd0b8b9946f119bf706b43741eba54a9861b3a34bdaa6f4a6ba97c70bdebde1260200a55073a21e2
- SSDEEP 768:pbu7UNouqV4YkIe80sE8Xvn/3PHfXvn/3PHfXvn/3PHfXvn/3PHfayqC6meOHHlF:VNou/YleOHFpoLxh9VZ2+V1k7MO7
- TLSH
  T1DC538547BAD1897CC4B9C3309947DB31653D78528167292B2FC0873C2E56AAE9F3CE52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  libsss_ad.so
- Size 301KB
- SHA256 a887ea1acc023473dc5e6cd2dd1774e9b28b8ff6842d23801d7cf83618188014
- MD5 f325567271f9b917393d545f1d251d63
- SHA1 3d3547d711b0051811a074c6bec7199f1490b856
- SHA512 7ba97abdb35cc48e0929069497d77d369c69c6bc88b9c75d0f935a5db768d64386a042a87918f749e74c584260d04323d69a4c41649a6b572890a35501d97e5e
- SSDEEP 3072:I6oU7wDI8l/Bk8TXn8iDG/eijSUB8LMksisOeGMkmU3H2kPuDis2fF+tjdnyg4Qc:hoLIaw2LiisOeG33PPAA+Fdnyg4UBB+
- TLSH
  T1E964291BD959186DC4E5D8719ECE96237C36B0608320226F0E95A07D7C4BF34BE3EDA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  libsss_cert.so
- Size 19KB
- SHA256 640789e91413a52d379e2bd7134b1b31e4b5a3edbec42997f168612f07fab4d9
- MD5 32d546d526d7baf6db2d755e2135f4c0
- SHA1 33ae983c3eadb83e1a3dac20eb2cead603aef8ec
- SHA512 56784a7f24bb422c291d4596310663ca11684130511797e3d447da4d3ada5daeed8d7e8009a95cd2309821cbf0a6df855e684dd9acfc342c16634a044228a969
- SSDEEP 384:PbN1JrcNFdVtl91NFdVtl91NFdVtl9YQog4wIg5YQog4w/qP+3bjLS3DYE1LV+:PRYNFdVtl91NFdVtl91NFdVtl9YQog4s
- TLSH
  T16692C70BB3434D7DC1E4F7348A9B8A22A531E465E270126F0E14E57A3EEB7551A3FE90
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  libsss_child.so
- Size 27KB
- SHA256 57d41d865b508b08bb485946a3207409ce808efb18a76345344e1c16e529cbbf
- MD5 b2c026227dae02d6af75c469eec7addb
- SHA1 5fd8f5cd7ecfeee10434ae8c89efaa12b085610e
- SHA512 70da9b0db7df17bd653b0e5a80c97ad988a70479d2052eb1915176d3c233a61cf58f66b775f4cc4a25b3b2e498f5c6d7ae416b27fa7837a61417ec33269b1edb
- SSDEEP 768:dgXfnv3/HPXfnv3/HPXfnv3/HPXfnv3CKSaiqy6CKSaiqyD8Hl/5Wso5GW:/8dMso5f
- TLSH
  T176D2D61FB2958ABEC1888730DD77D6221431BA10E271465F2F00B63D7FCA6655B2FE92
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  libsss_crypt.so
- Size 24KB
- SHA256 0a942ed5457d56b9f77afeb67cf9721828e3d29747d390e09b74c8287910570b
- MD5 99d9084fee6eb64b731207d12ea1409e
- SHA1 bad339c75f9297994af5704107c0a1708184fd6e
- SHA512 5009a0801db4b30d783fede245ccafc69952e9719b26895a02e9abc0f3302dc81f7bc4e57c923d38022801ac16761b47419342a4aa3db44e14728f1e1406ce80
- SSDEEP 768:760dFN19ltVdFN19lw4goQYAIw4goQYAIw4goQYAIw4goQYAIDrzbjLT7D5Qkxc+:mkx0G
- TLSH
  T1DEB2E94BF6129C3DC0C4F2359AFBD2152A30F054E232266F0F40EA7E39F76A44665A65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  libsss_debug.so
- Size 24KB
- SHA256 951f4460f9b6df2c50cfc869cf5fff6eb5442a64c28cf912b9bddbbca76fd4d4
- MD5 ce60505e86728ebfb1d10f577821b8ef
- SHA1 1cd6261a7ceb5eae19c4334f3b77c1b041296fbb
- SHA512 6a1998d8bff672b3f0f5dbfc1ae818ef39ed32142545d030235d304517e49d14f1e4812720d915a9efe4f83b03514397cde6762415faa9a38cd6665f370f6ea7
- SSDEEP 768:t3Y32Es0ckMU8Es0ckvXfHP3/nvXfHP3/nvXfHP3/nvXf8B8C/jvR1wyCy:9Y32N/jpKyCy
- TLSH
  T1A3B2C557B2522CEEC2CAE370C947D17DB9B0BC865733152B6E00BE363F9A6444A3D551
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  libsss_files.so
- Size 56KB
- SHA256 43d33f8bd30b0070ef05b1deadc8633b99ff100786a641c6b488ad226c0eb67b
- MD5 97c42d7409c46f6b798a834f365c7d0d
- SHA1 0afbc2709854b8bbcfab68c494d3d625f82482dc
- SHA512 d491ac2e563f1ce44f796955ce378395e2a3ba5da26f5d77e14bece3f45844d263c441923703eaa6ef1d8a4c3bf18aa181fce1b5fc9abe0d33313daef02e038b
- SSDEEP 768:CcPcnpldVNF91tldVNF91tldVNF91tldVNF91tIg4QY5AYwIg4QoAYwIg4QoAYw5:DxV84PI6264Ilhc
- TLSH
  T13343F91BA652087CC0E0F6F2DECB95637D35F418A730221F0A08E13A7D4BA645ABED75
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  libsss_iface.so
- Size 148KB
- SHA256 6cb3ae781c622ee18e5c6eacc48dd4aed8b07dbc020d876be9429e144cffcf63
- MD5 5de3ffd9d2ff61b29dd42c2eb9a31ce7
- SHA1 9466b6164424d2ab8a6f10f42ff50d13a76376d9
- SHA512 5c44f40c50bd69f3e794066ca3d8150b3e776c25c0115950422489e7fab22bd7d2173fa020d09d3665e10c8d68b8d248378c31bc57a0c84fc5f6c8fb51ebc049
- SSDEEP 3072:Bz9/7YcBKNdQm0ZI7yxt3M9xjdkT02oxVRRHeY1uwyJjjYvZ2i9m4o9vUyeOX6EU:Bz9ji+c9xjdkT02oxVRRHeY1uwyJjjY7
- TLSH
  T151E3D8137355887DC1F2D2399ADBC433332C7840C7A656DB2E59C12E3D899692E6FE81
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  libsss_iface_sync.so
- Size 64KB
- SHA256 2da081349ac69e3d274a554474036b21f40437b65e548cb7b58612577b24400b
- MD5 0e71749417e8edc92a4396207593748b
- SHA1 25fb7d810631598715dc48b010c096bbc633f677
- SHA512 99fb2cd9ef31e60e57ee06c86d40c625bb6b5e7c19433eb3aefe3ceda6969b7881d587b94059e4b698b3661ffee29af25b1b80be67f25e347f3582a1cbe06018
- SSDEEP 768:dnAVeLX1lQXrh9thZxpB5RJhZxpUMkc0sE8UMkc0sE8UMkc0sE8UMkc0sE8Xvn/w:9AVercrOFaCtiYJ346wwTh
- TLSH
  T1B553E807B251C83DC1F1A734CA8BE53255B6F810D639741B1F008A7E3A9A5A99F3FE94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  libsss_ipa.so
- Size 607KB
- SHA256 91437ef46962f0dee718216f806392eba9e81b3d65d89b8a10cd2d5342ee9059
- MD5 dc7ce27af1f97dcfa16f48ace6d7e8ab
- SHA1 af7ef5d4e64432b48574bb3d63309ce4b5203497
- SHA512 92be2cb8e8af29d3a58058f0bb5efa79584014a9ae1986dc04af420921c2694cfa4d791ddf347f76eb7ebf43eef20bca75a2943095dbe3ad85ff151ef6274a42
- SSDEEP 12288:J/VByVQM3SyqRfMeuJtWNMsO4qieVCoiS9RloZLuStNg:nc3iy2fMJJtW8d988StO
- TLSH
  T12AD42A2BDE540C59C0E1D8B0A9EAA9137C35B19482E0362F1D5DE4357C4BE692F3FE92
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11
- Target
  libsss_krb5.so
- Size 11KB
- SHA256 bb5f3fa4fb0f85a67ab539544b198c1b6d3df6df99b130a8c0c1783261609eac
- MD5 08c14b5c7e7a892b99b46a2f2bc67b83
- SHA1 1e3719dd5a7db5ac79684a3c190081e13424c3c1
- SHA512 71b27b3a40e02da93ae7cac831a3f2cca607721a96da1c9692b297cfa1bb94a52059c7ebdc2be9a328a4ab749b14120724b093d53c7170e3b8e87a80fde0145c
- SSDEEP 192:RVmQ8elL6vqMn6jLJh7DrzbjLT7Drzb8RgE1dGRy+yy88qbSQm:LmOlLjMn6jLT7DrzbjLT7Drzbwd24
- TLSH
  T1DE32B54BF7610E3AC5C8973488AF87317778E855AB71432B1B70E1393C877845E22EA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  libsss_krb5_common.so
- Size 154KB
- SHA256 c226c36eb9bf1352430a57ea2188752746c47adafe52f0cd877608f0499dc9e4
- MD5 e0f92920429d1d72b8b73a8d782c8c34
- SHA1 53b449028639fff9e57934559de9c06744a9fc3e
- SHA512 c29a5412421b9e78f7c801844d2ba5a33ff33123e99ace8ce86ac0d30f5acce810011b75a480cb170119b06d18464265340a9f80e832ae85361c86f46ce3e833
- SSDEEP 3072:7RC95F14tnlb+mzfd4wx3LranhWJ+tzlXvTkmbJOf:7RCP4Buwx3anhp5lXvTkmbJO
- TLSH
  T137F30A2BA29208F8C0C0D5B0CE9B96112D36F835E771236F1F84A53D7E6FA24563EE55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  libsss_ldap.so
- Size 24KB
- SHA256 d7abb39c55fbbcc252bbf78fe1f18263bd31c8247e39fd4d966ecdef25b0080f
- MD5 cb529a0de753d1a0e000ffe61e3741e2
- SHA1 8e45c85f6657d99e849c8a92cfbfd9ce2ef320fa
- SHA512 1d8882d91672d4ddbf30bcdd875e46175f793ab070731bc233729cf759bb147a2dac7a3dfbca5913576c727792956a4d4d1312bd8d55415e562379d5c4837857
- SSDEEP 384:kpzr8am94xdo3djcGO2+muWeGO2+muWeGO2+muWeGO2+muhZxpB5RJhZxAhdVLoh:XyGO2+muWeGO2+muWeGO2+muWeGO2+my
- TLSH
  T190B2C60FFB62882EC0D0E734C59BDB116930D994E5722A2F1F44B27E2C477982E6BD19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  libsss_ldap_common.so
- Size 709KB
- SHA256 4cd14b646d89517b52950347fa461263acb08cbf034b34f506510a6bd8af8eab
- MD5 e6db8b8c34ae68e6839d5cff0962864d
- SHA1 94267c53ae974e4e2f37f14f0febef255503c470
- SHA512 89c5006bc9bd870ab614c9f78619bb19cf3552d87a64d0835a0f1697a1757a1317bcb200dd2d577c1ad4af82247d683bea144175bf4d9346b63c9cbfc3df9b53
- SSDEEP 12288:VL+VfROczw3XiwH5a7cy/Dp68i9ePtWBsOy14uv/g435hrPyc1tGB5tWX+QQLJVp:EfROczw3SM5ccy/9DWQykBrGB5tWX+QU
- TLSH
  T17BF4F8279D525C48C0E2D4B0A5EF9D227C38B82181163A6F065EA53E7D4BE142E3FF97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  libsss_proxy.so
- Size 100KB
- SHA256 8c242aa448463696ebf0f2be39ca20cc9aecc7f611686ddaa4845da7475e6f4d
- MD5 98e88ec520c67c13246185aa964e8143
- SHA1 79a5eaabba1170785bd9e65a5f8d08cc373c13e4
- SHA512 9d7e83017dc2981ec01b5aab83fbf8ad5b972fd69d278dadb0def55eb526acdf146549f471ac92a3cd10be04fd737076d54a997b960cae8938e6283240939b5f
- SSDEEP 1536:6kTUQx/0SD0FXgZneAv3b4O0cLju7ACt57Lgw/R56WlYW:6kTUe/0S+Q39v9Ct57Lgw/PtY
- TLSH
  T113A3E71BD66208BCC0F8C4B4CEDB8B117D29BC259671376F1E44A1397E5BE195A2EF80
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  libsss_sbus.so
- Size 260KB
- SHA256 03283a0e0e78c0d7b74f6c667843c19ff404f6f6e4d6591126cac686aaf9cec5
- MD5 8e8103835c4e9d10760101415090ade7
- SHA1 835e9164dcef2c6a8f6d4eebc169459c40d53cf8
- SHA512 5b6edf9039279c2f5330cf5090514e2832ef372c19bf7ccbff12f1c5e24debf143f77b8caaf607b99b823872297f6c405664081d7fe85e63a4748f7b2a839337
- SSDEEP 6144:ZPSpfiK6ntY2m/CU+7+BKu4hrNH8iNbJ0wmI35boa4zcxDG0Px/D4mnNRSlGTBR5:ZPCf/2m/CX7gKu4hrNH8iNbJ0wmI35bd
- TLSH
  T13D441A1FA30548FCC5F3D032864799325739B0509362A52B1FC8957E3E5AEA07E7EE62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  libsss_sbus_sync.so
- Size 98KB
- SHA256 4f400ba6defc8bce63c45ac241eccddd24c364135e82a06f5758408e86bf97da
- MD5 adbf40fe292856b4a6a1e077ba231160
- SHA1 d9e9ee30e11e3f73591ff1c83a27462806ba7a41
- SHA512 54312d29e9597294078991cc845ab37532d7642f79af7d027441815137e0ad236110d4e3364af6278ee97a044401537cd27d53b048f54740601b65cc072ec64e
- SSDEEP 1536:lJsHNsJ7gfU/YC6jAJ4+wQ0Rs+L4qdYce:bsHNsb/YhQ4h74qdYp
- TLSH
  T130A3090BB6B14C7CC1E2D130C94BE5724B64B611A132572F3F40A67D2E9A6AF0F3AD60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  libsss_semanage.so
- Size 15KB
- SHA256 b01a20c7c404abef7d0ef951cb7cfa182fb2860e2d7b27c283f292916aebef0e
- MD5 93bf5c5935a2e75a7f643fa30df8f192
- SHA1 f39248a6dda8511795dcb414e2b9037ebdcf0920
- SHA512 4d6240b8de88e2d369968d85985babb55eb05b5b43f12a43cff71e7206c26d9c1475d9252b7b70657fb92278163824a5044384dcea099cdffca7cac7d094bb59
- SSDEEP 384:BQgK4ySGdKEc0Mk8UsEcyvMk8UsEcyvMk8UsEc0M45TJEY/Z4JzbQ:BlEc0Mk8UsEc0Mk8UsEcyvMk8UsEc0ME
- TLSH
  T14B62B64EFB21483FC0D59331D55B9262BA32F421D2735B1F1E20A5763D877A92A3EE90
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  libsss_simple.so
- Size 32KB
- SHA256 231388d7c61a8ef1e5a89265d943ad1d8a0a1db78566ab925d427de482863982
- MD5 c9ee928bad3990b591d07564789541f3
- SHA1 00b820838369b0ec89ed740bb87dad28a575ceeb
- SHA512 2fb6b91194994086f52acc9b8e771391d68752a6a1f0f86aef696f747d84f32b4850a88387b53cb35caac94a5d08e305f0f83d0f04d19a01a719e8155bae5418
- SSDEEP 768:YnzU+WuGe2Om+WZhJR5BpxZhJR5BpxZhJR5BpxZhJR5BpxVqbHHit5exLudBMct+:ahjHiyFudBMct2w1K52Mml
- TLSH
  T127E2F81BE302083DC2F8C672F9D79A323D34B4199231175F296CA07A7E4BE585E6BD49
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  libsss_util.so
- Size 579KB
- SHA256 58743748369e58b3e9e669701768a19e48a51b441bc51e70051811c1779c3190
- MD5 8af1f8979ffafbf328f06ce30dfcdd9a
- SHA1 95542c900cc2ef3dbfcd94578112d86f966bdf02
- SHA512 df912d9553c53cf32cc08aad8a900ed5c4820e94240bbd643dc8d2e67b622d7168bf5aab935839bb569134032a9f6023eeb9d0d632c7dc952aa2aff05c9c256a
- SSDEEP 12288:cRhgV8P5EC7+2fu5hgL4W6m93pH2VaCfCqCk0kVUwebCZimJ76Pmay9aGQ0Sg2Bf:cRhYlC7+2us4G5H2ICfCqCk0kVUwebCJ
- TLSH
  T13DC4190B63A20859C0E1C8B0C79BE2723836B459D365767F3E84E9353D56E652B3FE90
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  modules/libsss_autofs.so
- Size 20KB
- SHA256 9dd1ceafb39cec414d1679a98cf1ae25915a4dbc40e767122aa272e029dd0a2f
- MD5 8d440033721946751c8d2ddae4923be4
- SHA1 b00c0d8e9ab76d2e81d0a27abfc6af8c1e672dad
- SHA512 2fff82091d4a92ef64b6466f757bc4851f76fbe1040ffe7030305360b2dacebc7be566f2dc3ca191871837ca57a4c5937f8683adf9b2a21eca3675cb379d4534
- SSDEEP 384:grhpbsw0ikc0sEKvUMkc0sEKvUMkc0sE8UMkc3PHfXv6jHpeXvfa2yfh5Arp4/w/:sHRkc0sE8UMkc0sEKvUMkc0sE8UMkc3i
- TLSH
  T16092E75AF2734C7AC494E6318A6FD1366570B050A2312B2F3E90DA791ED3A951B3EF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  modules/sssd_krb5_localauth_plugin.so
- Size 32KB
- SHA256 caee3bdb4754b2375dac441ccc8ab86f12cd5fa9e0aa15b80841392e699dd4b5
- MD5 b0fd51441e22007939261cbb80236dae
- SHA1 05f240f5e547a5e61698f4f4f178be75bd83c906
- SHA512 4146e4a4c15d0da7d4dbdcb2a0a5050b2f4bfe6f31d7e0f9cc64f1fbbe646ca3ce83053d19b5161e3d60d8075a6d605264703756b7d94646e70c0dc6fe4a4088
- SSDEEP 768:AaujFkc0sE8UMkc0sE8Xvn/3PHfXvn/3PHfXvn/3PHfXvn/3PHfayqC6SKiayqC6:Aais3w7XI6NoG
- TLSH
  T1A2E2F80FF6734C7DC4D0D3308A8BD6226575F054A131653F3F04E67A2E9BA694ABEA60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23