Resubmissions

27/09/2023, 15:12

230927-slaz3ach497

25/11/2020, 08:51

201125-237h7mgpxa9

24/11/2020, 13:31

201124-38cax1ssh29

General

  • Target
    269614e98cf1a6f16026139c078e03c4790a03020abd0ac881540358f8f620cd
  • Size 17KB
  • Sample201124-38cax1ssh2
  • SHA256 269614e98cf1a6f16026139c078e03c4790a03020abd0ac881540358f8f620cd
  • MD5 SHA1 SHA512
Score
9/10

Malware Config

Targets

    • Target
      269614e98cf1a6f16026139c078e03c4790a03020abd0ac881540358f8f620cd
    • Size 17KB
    • SHA256 269614e98cf1a6f16026139c078e03c4790a03020abd0ac881540358f8f620cd
    • MD5 SHA1 SHA512
    Score
    9/10
    • Writes file to system bin folder

    • Creates/modifies Cron job

      Cron allows running tasks on a schedule, and is commonly used for malware persistence.

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

    • Writes file to tmp directory

      Malware often drops required files in the /tmp directory.

MITRE ATT&CK Enterprise v6

Tasks