Resubmissions

11/06/2024, 04:19

240611-exs35atfph8

11/06/2024, 04:15

240611-et7r4svbpn1

General

  • Target
    start
  • Size 47.5MB
  • Sample240611-exs35atfph
  • SHA256 c73bec2e2a790f7c64bc9a6a87a45ae69332f55446bb11d04f763b88908a98ea
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10

Malware Config

Targets

    • Target
      start
    • Size 47.5MB
    • SHA256 c73bec2e2a790f7c64bc9a6a87a45ae69332f55446bb11d04f763b88908a98ea
    • MD5 SHA1 SHA512 SSDEEP
    Score
    8/10
    • Modifies password files for system users/ groups

      Modifies files storing password hashes of existing users/ groups, likely to grant additional privileges.

    • Adds a user to the system

    • Creates/modifies environment variables

      Creating/modifying environment variables is a common persistence mechanism.

    • Modifies Bash startup script

MITRE ATT&CK Enterprise v15

Tasks