Overview

overview

7

Static

static

1

ffrelay-de...30.ggi

ubuntu-18.04-amd64

7

ffrelay-de...30.ggi

debian-9-armhf

7

ffrelay-de...30.ggi

debian-9-mips

7

ffrelay-de...30.ggi

debian-9-mipsel

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    ffrelay-debian-4.30.ggi.zip
  • Size 217KB
  • Sample260910-gxte1a11as
  • SHA256 7225f6dc3276caf343561e229681cf9d6ec18b88f6b40d2c949ba99c0c716443
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryexecutionlinuxpersistenceprivilege_escalation

Malware Config

Targets

    • Target
      ffrelay-debian-4.30.ggi
    • Size 222KB
    • SHA256 716dfc991af82e8d2563dc4b6f121c7a3ed7d6fcfe58d20b4c826ec456942b65
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discoveryexecutionpersistenceprivilege_escalation

    • Executes dropped EXE

    • Creates/modifies Cron job

      Cron allows running tasks on a schedule, and is commonly used for malware persistence.

      executionpersistenceprivilege_escalation

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Modifies init.d

      Adds/modifies system service, likely for persistence.

      persistence
    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Enterprise v16

Tasks