General
- Target bins.sh
- Size 10KB
- Sample241024-dwezfathpm
- SHA256 7b9240b2c5b358664c0501676f67b17a2d5ab45a1fa8e5ca57e25984d5f88232
- MD5 3a5222c9f14e7eeb1506fb901d740718
- SHA1 4bf1a642fe2967ef71873488d958883aac40e32f
- SHA512 1e0cec96e2a47df3c054aedb54db6bb6e58e28e6f32ed0e2abc5a2252a2c8da8e2f154fffce0c1fe108f560224d8b146f2cdfd0c3cfa5f19b13025898376cbfc
- SSDEEP 192:EnnmLTwDGDyDVD+D+DcX5sLsARmGcZRaZbnnmLkDGDyDVD+D+DMmn3sARmGNG:EnnmLTMyGhKKC5sLsARmGcZRaZbnnmLL
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
bins.sh
Resource
ubuntu1804-amd64-20240508-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
bins.sh
Resource
debian9-armhf-20240611-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
bins.sh
Resource
debian9-mipsbe-20240729-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
bins.sh
Resource
debian9-mipsel-20240611-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target bins.sh
- Size 10KB
- SHA256 7b9240b2c5b358664c0501676f67b17a2d5ab45a1fa8e5ca57e25984d5f88232
- MD5 3a5222c9f14e7eeb1506fb901d740718
- SHA1 4bf1a642fe2967ef71873488d958883aac40e32f
- SHA512 1e0cec96e2a47df3c054aedb54db6bb6e58e28e6f32ed0e2abc5a2252a2c8da8e2f154fffce0c1fe108f560224d8b146f2cdfd0c3cfa5f19b13025898376cbfc
- SSDEEP 192:EnnmLTwDGDyDVD+D+DcX5sLsARmGcZRaZbnnmLkDGDyDVD+D+DMmn3sARmGNG:EnnmLTMyGhKKC5sLsARmGcZRaZbnnmLL
- MD5 SHA1 SHA512 SSDEEP
-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
-
Renames itself
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Enumerates running processes
Discovers information about currently running processes on the system