Overview

overview

10

Static

static

10

48dcbdf9f9...1bc5e7

linux_armhf

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    48dcbdf9f92f959c6f9a1af52594cd90ab644d28f812e25729d11793581bc5e7
  • Size 160KB
  • Sample220625-da9xpabcbn
  • SHA256 48dcbdf9f92f959c6f9a1af52594cd90ab644d28f812e25729d11793581bc5e7
  • MD5 SHA1 SHA512
Score
10/10
kaitenlinuxpersistence

Malware Config

Targets

    • Target
      48dcbdf9f92f959c6f9a1af52594cd90ab644d28f812e25729d11793581bc5e7
    • Size 160KB
    • SHA256 48dcbdf9f92f959c6f9a1af52594cd90ab644d28f812e25729d11793581bc5e7
    • MD5 SHA1 SHA512
    Score
    7/10
    persistence

    • Modifies rc script

      Adding/modifying system rc scripts is a common persistence mechanism.

      persistence

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks