bae84d1a7173322826ca7bb2123ac45d06302756e1e198a8a9cf092a04bbb1f0 | Triage

Analysis

max time kernel
19719s
max time network
151s
platform
linux_mips
resource
debian9-mipsbe-en-20211208
resource tags

arch:mipsimage:debian9-mipsbe-en-20211208kernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
24-07-2022 22:43

Sharing

Report Analysis Logs

General

Target

bae84d1a7173322826ca7bb2123ac45d06302756e1e198a8a9cf092a04bbb1f0
Size

131KB
MD5

f354267fc1f682c9bd1749175fdbe036
SHA1

7739035dc4671625353ce09ceea5d3236d1233ec
SHA256

bae84d1a7173322826ca7bb2123ac45d06302756e1e198a8a9cf092a04bbb1f0
SHA512

947911fd675e3385ce2c8ecfc27a32b6e761a528dce03ed739cd2ca0b0cacf938ba9177784f5fbaf32b5ce88a1de9c63552fea46dde1f99842f2c6bca0085e5b

Score

7^/10

persistence

Malware Config

Signatures

Modifies rc script 1 TTPs 1 IoCs
Adding/modifying system rc scripts is a common persistence mechanism.
persistence

Boot or Logon Autostart Execution
T1547

Processes:

bae84d1a7173322826ca7bb2123ac45d06302756e1e198a8a9cf092a04bbb1f0

description ioc process

/etc/rc.d/rc.local /etc/rc.d/rc.local bae84d1a7173322826ca7bb2123ac45d06302756e1e198a8a9cf092a04bbb1f0

/tmp/bae84d1a7173322826ca7bb2123ac45d06302756e1e198a8a9cf092a04bbb1f0
/tmp/bae84d1a7173322826ca7bb2123ac45d06302756e1e198a8a9cf092a04bbb1f0
1⤵
- Modifies rc script
PID:332

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Privilege Escalation

Boot or Logon Autostart Execution

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Replay Monitor

Loading Replay Monitor...