Resubmissions

17/06/2021, 18:16

210617-arb9rgsa9n10

12/06/2021, 13:38

210612-55n311k7mn7

General

  • Target
    installer.run
  • Size 99KB
  • Sample210617-arb9rgsa9n
  • SHA256 819eab9afaca5601ffd83c85a7edd6cd1899e6b431ab8e901a385065912adeb1
  • MD5 SHA1 SHA512

Malware Config

Targets

    • Target
      installer.run
    • Size 99KB
    • SHA256 819eab9afaca5601ffd83c85a7edd6cd1899e6b431ab8e901a385065912adeb1
    • MD5 SHA1 SHA512
    • Detected EvilGnome

    • EvilGnome Backdoor

      Linux malware which targets desktop users. Includes common stealer/keylogger functionality as well as downloading and executing various modules.

    • Write file to user bin folder

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

    • Writes file to tmp directory

      Malware often drops required files in the /tmp directory.

MITRE ATT&CK Enterprise v6

Tasks