Overview

overview

7

Static

static

1

requiremetns.sh

debian-12-armhf

7

requiremetns.sh

debian-12-mipsel

7

requiremetns.sh

debian-9-armhf

4

requiremetns.sh

debian-9-mips

6

requiremetns.sh

debian-9-mipsel

6

requiremetns.sh

ubuntu-18.04-amd64

3

requiremetns.sh

ubuntu-20.04-amd64

7

requiremetns.sh

ubuntu-22.04-amd64

7

requiremetns.sh

ubuntu-24.04-amd64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    requiremetns.sh

  • Size

    8KB

  • Sample

    240701-j6jcha1clc

  • MD5

    881149037815f5f9d7cf7f44ac19ddc5

  • SHA1

    b2a727881e910bdc50069c21e138f6ccd897aa9f

  • SHA256

    fb8078997d6da092759d88b428f48d878d8ea43eaa244bbe3679f197bdbd6b01

  • SHA512

    f4f7685745415555f60f408b3b2a7b351b9f113f53b1e6ffbc50d416fe068c9747100955e2455e67d7b98dc92fca56bcebcbca59751d7cbce60534b336aacc01

  • SSDEEP

    192:/Fa1ZIJvH8czpCyzdpB3f1SAij8E3YUNvmTC8KfbmP/oYv0Yd:/EHexC+HSAHE3YUN+TC8SbmQUfd

Score
7/10
antivminfostealerlinux

Malware Config

Targets

    • Target

      requiremetns.sh

    • Size

      8KB

    • MD5

      881149037815f5f9d7cf7f44ac19ddc5

    • SHA1

      b2a727881e910bdc50069c21e138f6ccd897aa9f

    • SHA256

      fb8078997d6da092759d88b428f48d878d8ea43eaa244bbe3679f197bdbd6b01

    • SHA512

      f4f7685745415555f60f408b3b2a7b351b9f113f53b1e6ffbc50d416fe068c9747100955e2455e67d7b98dc92fca56bcebcbca59751d7cbce60534b336aacc01

    • SSDEEP

      192:/Fa1ZIJvH8czpCyzdpB3f1SAij8E3YUNvmTC8KfbmP/oYv0Yd:/EHexC+HSAHE3YUN+TC8SbmQUfd

    Score
    7/10
    antivminfostealer

    • Executes dropped EXE

    • Reads EFI boot settings

      Reads EFI boot settings from the efivars filesystem, may contain security secrets or sensitive data.

      infostealer

    • Checks hardware identifiers (DMI)

      Checks DMI information which indicate if the system is a virtual machine.

      antivm

    • Checks mountinfo of local process

      Checks mountinfo of running processes which indicate if it is running in chroot jail.

      antivm

    • Deletes log files

      Deletes log files on the system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Write file to user bin folder

    • Writes file to system bin folder

    behavioral1behavioral2behavioral3behavioral4behavioral5behavioral6behavioral7behavioral8behavioral9

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Hijack Execution Flow

2
T1574

Privilege Escalation

Hijack Execution Flow

2
T1574

Defense Evasion

Virtualization/Sandbox Evasion

3
T1497

Indicator Removal

1
T1070

Hijack Execution Flow

2
T1574

Credential Access

Discovery

Virtualization/Sandbox Evasion

3
T1497

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks