8133192277f6983770c2f817fc10862c6831d651db1aecebb40780880c9c72f4

Sharing

Copy URL Twitter E-mail

General

Target
netpipe_3.7.2-7.4build1.debian.tar.xz
Size 11KB
Sample261113-pcv24abs3s
SHA256 8133192277f6983770c2f817fc10862c6831d651db1aecebb40780880c9c72f4
MD5 251700accdc5d3b0e63f7832e02a229c
SHA1 937721dfe86d5fb9b8182fe93a1f5ae7e53035ec
SHA512 60696bff826ff802d8abb47fd85517ce5ac8cdb1c7e00664a66460cd21667b74d0a2ce5e52473a41a90bda5c8b0bb4e62c46952f0742d64b6ad2cbc04545395b
SSDEEP 192:t0KM32Uqecs1Qu3c2G8TP8oxZlCnWJQ//OY6jydngVQJFMe3I3P/yepOUzOzdK+O:tnM32UqeWuvzFwr/16jyUQJaB3P6AzOU
TLSH
T1FB32C0804852219D8EFC0AF44943E63E8EBCCC10BD27AC5F789A3D149C8647AD76C721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution linux

Malware Config

Targets

- Target
  debian/manpage_old
- Size 8KB
- SHA256 ced18e092a7141918ccb093ca6a4f491da52c47d708f84136a329ae4fb33377b
- MD5 f34519fa0768ba8e9b6356aed3575836
- SHA1 645cc0758c5058dc4e644f6932bfd076b7aea922
- SHA512 8dc247d0d2d8a14fc8c89b1552a9bc8a403d13db9c19f6c0e935dab7e72ee6bd75f3f0dd86146691b0d10872f2c43b439f37e0b270546863f84853f012e376b4
- SSDEEP 96:EIW1A/BxhXw8pPrR8yHy/Jn8yHyePDgekewOibjzWW3rvVw4sGIdtMjwIzOZ:E12BUARy/xyBewOmbjVLaMjwL
- TLSH
  T16002B92FA69F2F3A720600C3660E21DD535D62FF965301D8916DC9ECD30E83E5A6B2D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral1 behavioral2
- Target
  debian/netpipe.1
- Size 10KB
- SHA256 498a7783b7a85d2335bddc48ead33a2b306b67ab11e5b13c9646e4536ad5a4d1
- MD5 75a873338f30f4b642df5f3951605de8
- SHA1 c8b4fc4f6bec1738f5bff7c1b11c446e14bc3315
- SHA512 fcec5172cfcac54ee7d9430c2808a3f9e7389b4db4de29803c1f9a5ed722afb1b85ce6973ab02b27585866169e0b971edea38db1aecd302a5ec79bf5efae67aa
- SSDEEP 192:GFUhY4rtOPk0vGy1Fp6aRWM9gKUBw2dcOZ5Iay7Z:WUi4ZbaznW2lU7TIN
- TLSH
  T1E822B78F666E2337124304C2751E22E9E779D3FE63254499F4BC81D4134A87CA3B7ADA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral3 behavioral4
- Target
  debian/rules
- Size 4KB
- SHA256 9d8c179b8f759843b43787dc2ee1c3fed9a5f32160e77e1046214bd07ce71051
- MD5 d068fe3d714de0acc0efe53f34779180
- SHA1 46af2adb6de37ec23552979f19cc9b1e37cc8b4a
- SHA512 64e9ac164f169cf696915580e5a3b9fe909fea45d247d3a6325b5370e9c962bc5ccbd9024bfbb1aa70698976e05231a44015b609a5229ce00e7bc1a99544b18a
- SSDEEP 96:0asUyJLxjratKydlys+wHu1+P9IA1AvD5xWd9fXUxuSgnRRX1Zv0:0az4LxHatKyXP9vdQgnRRXf0
- TLSH
  T1FF91236BD0CC12392CD72347662BF3DAF344D12599925A52D3EE4EAAD307A392037A47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6 behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Unix Shell

T1059.004

Visual Basic

T1059.005

Software Deployment Tools

T1072

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Software Deployment Tools

T1072

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8