Overview

overview

8

Static

static

10

apa.jpg

linux_amd64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    apa.jpg

  • Size

    53KB

  • Sample

    220331-pea5psbff2

  • MD5

    10ac30ebbed68584400f8ccd814e2a60

  • SHA1

    fc3539a0c7b4f5bcbe22373fe0e81fb613afd270

  • SHA256

    6574b93062974e287a65798dca6f6efd2bc8f8e376baa6efa69ddfc719acf8d9

  • SHA512

    a51563bd3f6639b927d8c3ff53e24551d6a9936b8185305840c8e8cbc05ac3e8a465a7d3a09f915af7b81afec4092c7c4b170589d3b5f954e8ec65e4d11dea18

Score
10/10
kaitenlinuxpersistence

Malware Config

Targets

    • Target

      apa.jpg

    • Size

      53KB

    • MD5

      10ac30ebbed68584400f8ccd814e2a60

    • SHA1

      fc3539a0c7b4f5bcbe22373fe0e81fb613afd270

    • SHA256

      6574b93062974e287a65798dca6f6efd2bc8f8e376baa6efa69ddfc719acf8d9

    • SHA512

      a51563bd3f6639b927d8c3ff53e24551d6a9936b8185305840c8e8cbc05ac3e8a465a7d3a09f915af7b81afec4092c7c4b170589d3b5f954e8ec65e4d11dea18

    Score
    8/10
    persistence

    • Modifies hosts file

      Adds to hosts file used for mapping hosts to IP addresses.

    • Writes DNS configuration

      Writes data to DNS resolver config file.

    • Modifies rc script

      Adding/modifying system rc scripts is a common persistence mechanism.

      persistence
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Dynamic Resolution

1
T1568

Impact

Tasks