General
- Target sample
- Size 8KB
- Sample260813-alx6gswtas
- SHA256 91ff4fae45232b3050edaebb956c03ffa3e07d245017870aa777d6fb2dc3cdbf
- MD5 6e3c1ed31385044ae36b85341fc82963
- SHA1 b1bea305e32c14421634c8b46d2d8b3aa49dc69a
- SHA512 f78fb4a088e766aa6d2bdc23f2db4946c05e3358f5891a1f0515d2a5f09ef075fb21866c18927872e9b446bf33468c0150b5bb9e1d062278d2867744f53008a8
- SSDEEP 192:/uOMKzY39yxdg3guYBuMypvYreFpUpnwMdb7nAd69Wl6zlgMHKVXd1g/iFHpoTVM:2mxdg3vvYr20w8DAdmWwJgYKVXd1g/i3
- TLSH T18E02D8636250027122A5469BED0FD294A79CF47A2BB8B015B4AFB95C337D0BC107E5F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
sample
Resource
ubuntu1804-amd64-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
sample
Resource
debian9-armhf-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
sample
Resource
debian9-mipsbe-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
sample
Resource
debian9-mipsel-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target sample
- Size 8KB
- SHA256 91ff4fae45232b3050edaebb956c03ffa3e07d245017870aa777d6fb2dc3cdbf
- MD5 6e3c1ed31385044ae36b85341fc82963
- SHA1 b1bea305e32c14421634c8b46d2d8b3aa49dc69a
- SHA512 f78fb4a088e766aa6d2bdc23f2db4946c05e3358f5891a1f0515d2a5f09ef075fb21866c18927872e9b446bf33468c0150b5bb9e1d062278d2867744f53008a8
- SSDEEP 192:/uOMKzY39yxdg3guYBuMypvYreFpUpnwMdb7nAd69Wl6zlgMHKVXd1g/iFHpoTVM:2mxdg3vvYr20w8DAdmWwJgYKVXd1g/i3
- TLSH T18E02D8636250027122A5469BED0FD294A79CF47A2BB8B015B4AFB95C337D0BC107E5F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Defense Evasion
Deobfuscate/Decode Files or Information
1Indicator Removal
1Clear Linux or Mac System Logs
1Virtualization/Sandbox Evasion
1System Checks
1