kaiten | 49306ab9a6151450bbd61f6275a0ebd54bfa797d29556034a49d497e3234b6ff | Triage

Sharing

General

Target

49306ab9a6151450bbd61f6275a0ebd54bfa797d29556034a49d497e3234b6ff
Size

101KB
Sample

220714-axztfsghh6
MD5

3ca3ba59a625725655d49e336ca3de93
SHA1

195d8746e246c61548968dd119b4c81a30f57669
SHA256

49306ab9a6151450bbd61f6275a0ebd54bfa797d29556034a49d497e3234b6ff
SHA512

3f72ed3f6ec8e0f0d88eb8b6109ca32ffc332be05c51874e177ff0633b40658193a7b1bfeeb81bbe1e01e62845da5e95f80ed3f52a428db4df38eccc9b99d56d

Score

10^/10

kaiten linux persistence

Malware Config

Targets

- Target
  
  49306ab9a6151450bbd61f6275a0ebd54bfa797d29556034a49d497e3234b6ff
- Size
  
  101KB
- MD5
  
  3ca3ba59a625725655d49e336ca3de93
- SHA1
  
  195d8746e246c61548968dd119b4c81a30f57669
- SHA256
  
  49306ab9a6151450bbd61f6275a0ebd54bfa797d29556034a49d497e3234b6ff
- SHA512
  
  3f72ed3f6ec8e0f0d88eb8b6109ca32ffc332be05c51874e177ff0633b40658193a7b1bfeeb81bbe1e01e62845da5e95f80ed3f52a428db4df38eccc9b99d56d
Score

7^/10

persistence
- Modifies rc script
  Adding/modifying system rc scripts is a common persistence mechanism.
  persistence
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Privilege Escalation

Boot or Logon Autostart Execution

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1