ech0raix | 670250a169ba548c07a5066a70087e83bbc7fd468ef46199d76f97f9e7f72f36 | Triage

Sharing

General

Target

670250a169ba548c07a5066a70087e83bbc7fd468ef46199d76f97f9e7f72f36
Size

4.5MB
Sample

210811-cvzkka5tqx
MD5

88e4805cb7e08ffb870d72c56f455b2e
SHA1

c47baef1eef20ac0e5b90a8431296843e6c6c2f8
SHA256

670250a169ba548c07a5066a70087e83bbc7fd468ef46199d76f97f9e7f72f36
SHA512

03f235bbc12a8488f6c4b325142f655c7aa697fd2a65f1edbade8e0cece7196a3bfa1884b1b7ab1d6b71ff5a8e22a418dc0b0c094d9781245a9d87a014dd4ffa

Score

10^/10

ech0raix linux persistence

Malware Config

Targets

- Target
  
  670250a169ba548c07a5066a70087e83bbc7fd468ef46199d76f97f9e7f72f36
- Size
  
  4.5MB
- MD5
  
  88e4805cb7e08ffb870d72c56f455b2e
- SHA1
  
  c47baef1eef20ac0e5b90a8431296843e6c6c2f8
- SHA256
  
  670250a169ba548c07a5066a70087e83bbc7fd468ef46199d76f97f9e7f72f36
- SHA512
  
  03f235bbc12a8488f6c4b325142f655c7aa697fd2a65f1edbade8e0cece7196a3bfa1884b1b7ab1d6b71ff5a8e22a418dc0b0c094d9781245a9d87a014dd4ffa
Score

7^/10

persistence
- Modifies init.d
  Adds/modifies system service, likely for persistence.
  persistence
- Write file to user bin folder
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Hijack Execution Flow

Privilege Escalation

Boot or Logon Autostart Execution

Hijack Execution Flow

Defense Evasion

Hijack Execution Flow

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3