Overview

overview

10

Static

static

10

5b266c9bd1...5cbbb9

linux_armhf

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    5b266c9bd119725dda27c91c08dd3b61659f2b91a487b420b21514f3235cbbb9
  • Size 246KB
  • Sample220708-amnnfacag2
  • SHA256 5b266c9bd119725dda27c91c08dd3b61659f2b91a487b420b21514f3235cbbb9
  • MD5 SHA1 SHA512
Score
10/10
enemybotlinuxpersistence

Malware Config

Targets

    • Target
      5b266c9bd119725dda27c91c08dd3b61659f2b91a487b420b21514f3235cbbb9
    • Size 246KB
    • SHA256 5b266c9bd119725dda27c91c08dd3b61659f2b91a487b420b21514f3235cbbb9
    • MD5 SHA1 SHA512
    Score
    7/10
    persistence

    • Creates/modifies Cron job

      Cron allows running tasks on a schedule, and is commonly used for malware persistence.

      persistence

    • Modifies rc script

      Adding/modifying system rc scripts is a common persistence mechanism.

      persistence

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

    • Writes file to tmp directory

      Malware often drops required files in the /tmp directory.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks