c9bd6d01eb7258fef88ec5c9276431c1db45f063b316f83943e45b6a40a76783

Resubmissions

20/04/2023, 08:22

230420-j9pnpaae8s10

20/04/2023, 08:22

15/03/2023, 12:40

15/03/2023, 12:39

13/03/2023, 14:43

24/08/2021, 03:35

Sharing

Copy URL Twitter E-mail

General

Target
nyynvefzjerks
Size 546KB
Sample210824-ycawpc5ms2
SHA256 c9bd6d01eb7258fef88ec5c9276431c1db45f063b316f83943e45b6a40a76783
MD5 2a91a3170a5fd4fb3e30f3d63b9120de
SHA1 1a7a226833f43fdaee71cb6f84914f9a1e87de81
SHA512 2d396f7fd0e661a2f15a1f0dc51341b89d9b28f6742a4bdfb7fe9115c5c7b44d9b8ac6e1c5e492f5971c2f9595f17c4154d979f7183df23d8f52ab0e24834d3f
MD5 SHA1 SHA512

Score

9^/10

linux persistence

Malware Config

Targets

- Target
  nyynvefzjerks
- Size 546KB
- SHA256 c9bd6d01eb7258fef88ec5c9276431c1db45f063b316f83943e45b6a40a76783
- MD5 2a91a3170a5fd4fb3e30f3d63b9120de
- SHA1 1a7a226833f43fdaee71cb6f84914f9a1e87de81
- SHA512 2d396f7fd0e661a2f15a1f0dc51341b89d9b28f6742a4bdfb7fe9115c5c7b44d9b8ac6e1c5e492f5971c2f9595f17c4154d979f7183df23d8f52ab0e24834d3f
- MD5 SHA1 SHA512
Score

9^/10

persistence
- Writes file to system bin folder
- Modifies rc script
  Adding/modifying system rc scripts is a common persistence mechanism.
  persistence
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Hijack Execution Flow

T1574

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Hijack Execution Flow

T1574

Defense Evasion

Hijack Execution Flow

T1574

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Writes file to system bin folder

Modifies rc script

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2

behavioral3