New Linux Malware Exploits CGI Vulnerability
Tags
country: South Korea
attack-pattern: Data Exploits - T1587.004 Exploits - T1588.005 Ip Addresses - T1590.005 Malicious File - T1204.002 Malware - T1587.001 Malware - T1588.001 Software - T1592.002 Rootkit - T1014 Denial Of Service Rootkit
Show in Graph
Common Information
Type Value
UUID 3d05035b-3dda-4871-b01c-f433e49c9890
Fingerprint 97b53155fcb5b483
Analysis status DONE
Considered CTI value 0
Text language
Published March 10, 2017, midnight
Added to db Oct. 15, 2024, 5:09 p.m.
Last updated Oct. 15, 2024, 5:10 p.m.
Headline New Linux Malware Exploits CGI Vulnerability
Title New Linux Malware Exploits CGI Vulnerability
Detected Hints/Tags/Attributes 32/2/7
Source URLs
Redirection Url
Details Source https://www.trendmicro.com/en_ca/research/17/c/new-linux-malware-exploits-cgi-vulnerability.html
URL Provider
Details Provider Source level domain
Details trendmicro.com www.trendmicro.com
Attributes
Details Type #Events CTI Value
Details sha256 1 
8040422762138d28aa411d8bb2307a93432416f72b292bf884fb7c7efde9f3f5
Details IPv4 1 
192.154.108.2
Details IPv4 2 
172.247.116.3
Details IPv4 1 
172.247.116.21
Details Url 1 
http://192.154.108.2:8080/arm1
Details Url 2 
http://172.247.116.3:8080/arm1
Details Url 1 
http://172.247.116.21:85/arm1