General
- Target collect
- Size 79KB
- Sample260925-przc3aeb73
- SHA256 d2a9f121d62057f5f3fd74aab66946512b0f7b0976c315f735464a408af29113
- MD5 05959feba3b81dda8289c7ccf986a84f
- SHA1 6c882504efe40b98a8e9201ac559296c015d3c58
- SHA512 c3b913ff29114499ae4d837c5c623270b405f01dbf1bb509ff508407fbca802c21884a510147f5b5471971119668e1f620076108a2afb8f5670418216274fcf8
- SSDEEP 1536:SMxSBKhDWo5Yo2nFAd3NheC43s9Zo2eR8kGl5V78HeNe7ZT7tkKW1n+FV8mc5xAf:SGB2sER8kIzzMZT7t3W1nw
- TLSH T122830893F59C8B7025ED867DD880243462C74A1B88693C90F09F79CC3F786A9B175A6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
collect
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral2
Sample
collect
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
collect
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
collect
Resource
debian9-mipsel-20260513-en
Malware Config
Targets
-
- Target collect
- Size 79KB
- SHA256 d2a9f121d62057f5f3fd74aab66946512b0f7b0976c315f735464a408af29113
- MD5 05959feba3b81dda8289c7ccf986a84f
- SHA1 6c882504efe40b98a8e9201ac559296c015d3c58
- SHA512 c3b913ff29114499ae4d837c5c623270b405f01dbf1bb509ff508407fbca802c21884a510147f5b5471971119668e1f620076108a2afb8f5670418216274fcf8
- SSDEEP 1536:SMxSBKhDWo5Yo2nFAd3NheC43s9Zo2eR8kGl5V78HeNe7ZT7tkKW1n+FV8mc5xAf:SGB2sER8kIzzMZT7t3W1nw
- TLSH T122830893F59C8B7025ED867DD880243462C74A1B88693C90F09F79CC3F786A9B175A6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1