Overview

overview

8

Static

static

5

linux

ubuntu-18.04-amd64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    linux
  • Size 1.2MB
  • Sample261017-pg53vsszht
  • SHA256 25c34c028f0c119da251ca5d17020df79a030c7c3b86c5a8df699065016a21a2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
command_and_controldiscoverylinuxupx

Malware Config

Targets

    • Target
      linux
    • Size 1.2MB
    • SHA256 25c34c028f0c119da251ca5d17020df79a030c7c3b86c5a8df699065016a21a2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    command_and_controldiscovery

    • Contacts a large (1769) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Outbound SSH connection to public host

      SSH is used for remote access. This may indicate SSH host discovery, encrypted C2 traffic, or data exfiltration.

      command_and_control

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks