pingpull | 1cf4792a6f52ce24d6ee1d1fb6efb322f4476e8c777fc16fad7c52a7a5c21332

Sharing

Copy URL Twitter E-mail

General

Target
ubuntu.trusty.tar.xz
Size 41.1MB
Sample260808-rmg94asvfx
SHA256 1cf4792a6f52ce24d6ee1d1fb6efb322f4476e8c777fc16fad7c52a7a5c21332
MD5 5f3bc25756ed7be525a21f6780ec2446
SHA1 ed6bd3e70cb56025982ce6a51417c2fd66790c3a
SHA512 0cbdc1607b1af81b446f3a4d67d8173d58bc75c4aff618ab1173b0cdb05cf0c5d489b085566187af911ccb2d2cd7fe1a9db4df592db905a036bc9be6d1cb7142
SSDEEP 786432:FVoP+X/8a1fHgt1F91W6CGxkpSsAZLGRXf6uCW4fjJtk19Vp/slDz3:FV1Xka1fHm1F9jCmkp+Zyx6tLfjJsJ/w
TLSH
T1079733A2900C5DCFB89E0B3675CF0985072D1A172FEA03A111B896B7A9FC1B1652FD5F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  sbin/initctl
- Size 17B
- SHA256 306c6ca7407560340797866e077e053627ad409277d1b9da58106fce4cf717cb
- MD5 33e4fd94e2560e008e2c3b431d0e3419
- SHA1 504519c842b7202250315ef562069e4ce10da99c
- SHA512 69f097faa9ccb981e78c3a914ad68a51771637d9aecd2dbc807003ac30663e6d921091a48ff529dfff27a6cd55b0808f91683118acf7acdf406d37266e622b17
- MD5 SHA1 SHA512
Score

1^/10
behavioral1 behavioral2 behavioral3 behavioral4
- Target
  sbin/initctl.distrib
- Size 188KB
- SHA256 795e29c9c727b58253cdb14f702bf62b7b32fedcf6f82bc6dbf94d1f0b0c4b23
- MD5 83bb911d6ef03086c1f740ef6e3342ad
- SHA1 91bb32e6881a988802e6d42cbbc2b57ca7014870
- SHA512 a0c15cbc9258cd0e167dc4406360969549090d459abb5bef571f2de9a3670b4d4e27998008d89b7957f4a0aa81b0741c4fe3295590d8343478056e737fa197a3
- SSDEEP 1536:kvuC+WsuhTWYkwVmwGLEnn4bT3vVLILaOPFPTZVpEAgV8fF3yFrpqbPV/rlfoTwv:uBJhiFjg4fdEZJSzG3PCw
- TLSH
  T15414D971B8951CBDC2A557324BEF911A3C71B29C8332AAAF26D417503D42A20BF5DF8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  usr/sbin/policy-rc.d
- Size 19B
- SHA256 c2bcd9decf63ff2c0d9f473f38bc3607900530aad80f99139855d56678456230
- MD5 2f31905d39c6a4ed28a9217decbb7208
- SHA1 1f5e670e93f2e613eab7c53b5c08fc1447b71e81
- SHA512 de221a686351e757f75f20729a9809a4fcf4544abc4e8632dc1fca0e525a61ce78d6480d62d93aa853707437d71bfd44bed14d49376b3d761ce3e255d698cf74
- MD5 SHA1 SHA512
Score

1^/10
behavioral6 behavioral7 behavioral8 behavioral9
- Target
  bin/bash
- Size 997KB
- SHA256 8c4d49445d0050884e0703571f187338b10c7836b08ed822cc5fc6cf15ac76b0
- MD5 164ebd6889588da166a52ca0d57b9004
- SHA1 8e3aa19fdc42e87659746f6dc8ea3af74ab30362
- SHA512 cc7cb38021a7604f2fd5a54a3013e15bba3b752f7815c11e64638234b386dd91c5d970a6d1c73d4af9945a2c258048486632d6a69b44f4c8448f7f8d4e5e91a0
- SSDEEP 12288:khRO05dvtF0rztLGcXNnxX3BlJDd1XLsNbb8ckf9PSKMedh50jn58r0mUX:kXR5dvY/tLGcXNB3Bldnobu7MedbSnh
- TLSH
  T1DA255C0BB5A664FEC992C470462F9372A831B46552237C7F349CD7342F96E640F2ABE1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  bin/bunzip2
- Size 30KB
- SHA256 42b65067a8b84f2413eddadac780e453c38e310ee8b9dcb7c5d68c8531bf8eec
- MD5 0a35aa198d80c3b7ebcdd0cefca38063
- SHA1 dae8d8c367149f4b71f5ea2261733431f9d9ab0a
- SHA512 a2f1b786368354049b023fa7367e8d02a3ec57b5360010200486287b03ec89406e80cc9f8e09a864750c554f9a37dd446334f54f20992acdfc4e15cc162ba46c
- SSDEEP 768:8L2ZB4F/BxQCr3okMkwPIuXqoXHjHLd7QtHiu3t:P0F/Bxxr3ofX4HiC
- TLSH
  T1C2E2080BA2414BBCC162C2B00E9B97756933B078C630A5AF7959DB743F067A81F1F6B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11