General
- Target bins.sh
- Size 10KB
- Sample241020-x2m2saware
- SHA256 88cd1dec7e52a438b0e316ca47298b7b73376741a5c423d7de924a29208782cc
- MD5 4df258afac082c765345136687fdb240
- SHA1 0cdbf5333864ea193e81b258a488b509df0bed0a
- SHA512 ad97012e97547376dc1525f12c378e6cf8a864ec108266cc9a8875ae99b65a8a68eca912a1175e43584f1298bee6471c7c67d8f8af9416a5847fdaf39894ad5e
- SSDEEP 192:FhU03aGPwo229c4kQMNyqJOpsxl47T/U03aGzm229csyxl47TfQMNyqI:FaOkQMNyqJOpsxl47Toyxl47TfQMNyqI
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
bins.sh
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral2
Sample
bins.sh
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
bins.sh
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral4
Sample
bins.sh
Resource
debian9-mipsel-20240729-en
Malware Config
Targets
-
- Target bins.sh
- Size 10KB
- SHA256 88cd1dec7e52a438b0e316ca47298b7b73376741a5c423d7de924a29208782cc
- MD5 4df258afac082c765345136687fdb240
- SHA1 0cdbf5333864ea193e81b258a488b509df0bed0a
- SHA512 ad97012e97547376dc1525f12c378e6cf8a864ec108266cc9a8875ae99b65a8a68eca912a1175e43584f1298bee6471c7c67d8f8af9416a5847fdaf39894ad5e
- SSDEEP 192:FhU03aGPwo229c4kQMNyqJOpsxl47T/U03aGzm229csyxl47TfQMNyqI:FaOkQMNyqJOpsxl47Toyxl47TfQMNyqI
- MD5 SHA1 SHA512 SSDEEP
-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
-
Renames itself
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Enumerates running processes
Discovers information about currently running processes on the system
MITRE ATT&CK Enterprise v15
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1