General
-
Target
0f00c2e074c6284c556040012ef23357853ccac4ad1373d1dea683562dc24bca
-
Size
611KB
-
Sample
210719-8877zf5m8x
-
MD5
349456ecaa1380a142f15810a8260378
-
SHA1
02dd15ecdeedefd7a2f82ba0df38703a74489af3
-
SHA256
0f00c2e074c6284c556040012ef23357853ccac4ad1373d1dea683562dc24bca
-
SHA512
85d5dad44636f240be2943bc1e2ea0196af08ee778c4ebe055c237dffdc291ee34c4eedafc70d0c6dc6d8cdf2c48d1e296cf65c6bcbaa37e59fa276773961f0c
Static task
static1
Behavioral task
behavioral1
Sample
0f00c2e074c6284c556040012ef23357853ccac4ad1373d1dea683562dc24bca
Resource
ubuntu-amd64
Behavioral task
behavioral2
Sample
0f00c2e074c6284c556040012ef23357853ccac4ad1373d1dea683562dc24bca
Resource
debian9-mipsel
Behavioral task
behavioral3
Sample
0f00c2e074c6284c556040012ef23357853ccac4ad1373d1dea683562dc24bca
Resource
debian9-mipsbe
Malware Config
Targets
-
-
Target
0f00c2e074c6284c556040012ef23357853ccac4ad1373d1dea683562dc24bca
-
Size
611KB
-
MD5
349456ecaa1380a142f15810a8260378
-
SHA1
02dd15ecdeedefd7a2f82ba0df38703a74489af3
-
SHA256
0f00c2e074c6284c556040012ef23357853ccac4ad1373d1dea683562dc24bca
-
SHA512
85d5dad44636f240be2943bc1e2ea0196af08ee778c4ebe055c237dffdc291ee34c4eedafc70d0c6dc6d8cdf2c48d1e296cf65c6bcbaa37e59fa276773961f0c
Score9/10-
Writes file to system bin folder
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Write file to user bin folder
-
Reads runtime system information
Reads data from /proc virtual filesystem.
-
Writes file to tmp directory
Malware often drops required files in the /tmp directory.
-