kaiten | 2f805a8b08777adce9d8a428d6b48f61d5f4c113dbcb9717b9fc4c1411587bdf | Triage

Sharing

General

Target

2f805a8b08777adce9d8a428d6b48f61d5f4c113dbcb9717b9fc4c1411587bdf
Size

101KB
Sample

220621-y2fs5sccdm
MD5

c3548ef75116ddf90775b0cd45cd280d
SHA1

7d98077fb3e044c041f1c9ffa9ca3361135d15a4
SHA256

2f805a8b08777adce9d8a428d6b48f61d5f4c113dbcb9717b9fc4c1411587bdf
SHA512

db33c5ba3454ee2e99e2d5c7e2e1a40fd24c5b74bbef48b45295d193de98af4386aab8bbfbde5a16398cb243eecbb9248949b1e4f54482749e728b865af0667c

Score

10^/10

kaiten linux persistence

Malware Config

Targets

- Target
  
  2f805a8b08777adce9d8a428d6b48f61d5f4c113dbcb9717b9fc4c1411587bdf
- Size
  
  101KB
- MD5
  
  c3548ef75116ddf90775b0cd45cd280d
- SHA1
  
  7d98077fb3e044c041f1c9ffa9ca3361135d15a4
- SHA256
  
  2f805a8b08777adce9d8a428d6b48f61d5f4c113dbcb9717b9fc4c1411587bdf
- SHA512
  
  db33c5ba3454ee2e99e2d5c7e2e1a40fd24c5b74bbef48b45295d193de98af4386aab8bbfbde5a16398cb243eecbb9248949b1e4f54482749e728b865af0667c
Score

7^/10

persistence
- Modifies rc script
  Adding/modifying system rc scripts is a common persistence mechanism.
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Privilege Escalation

Boot or Logon Autostart Execution

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1