Extracted

• • Target
    aaa9531209cd91b2390d611d5d934be077dd5aa9780aa7b9c768e857b4ca392d.bin
  • Size 96KB
  • SHA256 aaa9531209cd91b2390d611d5d934be077dd5aa9780aa7b9c768e857b4ca392d
  • MD5 78ba32b2ca5a305479700eefd6b60b36
  • SHA1 a2ce5650e60e607331a5e5d49ce8da1631baf790
  • SHA512 63b97749dc28d5ead65ac6ea9815ef4562f853a5d4382281e93a7bcef69bca7c84e039f13a3d8b2ea62b85c25b414aa813bd627daf90a9a5a4328002ccfad967
  • SSDEEP 3072:J6DADe7HoFeai31mNhafSgyCt4H3YHH23HjHHHHHHHHHHHHHlHRHH4HOTp4m+WY0:4dNlmNkgCbm+WYYN4LZFDA
  • TLSH
    T16DA34C276AA1C77BC08792B937CBE5558823B83E0B32361E7BD87DA52B15DC85D2D301
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  6^/10

  discoveryexecutionpersistenceprivilege_escalation

  • Creates/modifies Cron job

    Cron allows running tasks on a schedule, and is commonly used for malware persistence.

    executionpersistenceprivilege_escalation

  • Modifies init.d

    Adds/modifies system service, likely for persistence.

    persistence

  • Modifies rc script

    Adding/modifying system rc scripts is a common persistence mechanism.

    persistence

  • Modifies systemd

    Adds/ modifies systemd service files. Likely to achieve persistence.

    persistenceprivilege_escalation

  • Reads system routing table

    Gets active network interfaces from /proc virtual filesystem.

    discovery

  • Schedules an At job

    Schedules a job to be run using the at command.

    executionpersistenceprivilege_escalation
  behavioral1