General

  • Target

    requiremetns.sh

  • Size

    8KB

  • Sample

    240701-j6jcha1clc

  • MD5

    881149037815f5f9d7cf7f44ac19ddc5

  • SHA1

    b2a727881e910bdc50069c21e138f6ccd897aa9f

  • SHA256

    fb8078997d6da092759d88b428f48d878d8ea43eaa244bbe3679f197bdbd6b01

  • SHA512

    f4f7685745415555f60f408b3b2a7b351b9f113f53b1e6ffbc50d416fe068c9747100955e2455e67d7b98dc92fca56bcebcbca59751d7cbce60534b336aacc01

  • SSDEEP

    192:/Fa1ZIJvH8czpCyzdpB3f1SAij8E3YUNvmTC8KfbmP/oYv0Yd:/EHexC+HSAHE3YUN+TC8SbmQUfd

Malware Config

Targets

    • Target

      requiremetns.sh

    • Size

      8KB

    • MD5

      881149037815f5f9d7cf7f44ac19ddc5

    • SHA1

      b2a727881e910bdc50069c21e138f6ccd897aa9f

    • SHA256

      fb8078997d6da092759d88b428f48d878d8ea43eaa244bbe3679f197bdbd6b01

    • SHA512

      f4f7685745415555f60f408b3b2a7b351b9f113f53b1e6ffbc50d416fe068c9747100955e2455e67d7b98dc92fca56bcebcbca59751d7cbce60534b336aacc01

    • SSDEEP

      192:/Fa1ZIJvH8czpCyzdpB3f1SAij8E3YUNvmTC8KfbmP/oYv0Yd:/EHexC+HSAHE3YUN+TC8SbmQUfd

    Score
    7/10
    • Executes dropped EXE

    • Reads EFI boot settings

      Reads EFI boot settings from the efivars filesystem, may contain security secrets or sensitive data.

    • Checks hardware identifiers (DMI)

      Checks DMI information which indicate if the system is a virtual machine.

    • Checks mountinfo of local process

      Checks mountinfo of running processes which indicate if it is running in chroot jail.

    • Deletes log files

      Deletes log files on the system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Write file to user bin folder

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks