General

  • Target

    bins.sh

  • Size

    10KB

  • Sample

    241025-xlxlaavbmn

  • MD5

    5713d2be4676218c2c2072cee2408f44

  • SHA1

    4bb07eb0d5bf08524709b63360c6ccdb67819dfc

  • SHA256

    0b90421ab60c529ab3e4c90ac1800b75d7627fcf678edc6d74f23ed6ae48cf3b

  • SHA512

    20230e3603c1a64e603ca0c3661a30b370dcb976f7a64b179916fa323027c21f54e5b665bc68ea61c365e545583d0e85ec8fa6984b7b0442cc923c1f686b107e

  • SSDEEP

    192:2qWhQoyMKitixUQw4Qkpii96RiEQYcK00QkpiirqWhQovKitixUkJ:2qWhQoys4Qkpii96RiEQYcK00QkpiirW

Malware Config

Targets

    • Target

      bins.sh

    • Size

      10KB

    • MD5

      5713d2be4676218c2c2072cee2408f44

    • SHA1

      4bb07eb0d5bf08524709b63360c6ccdb67819dfc

    • SHA256

      0b90421ab60c529ab3e4c90ac1800b75d7627fcf678edc6d74f23ed6ae48cf3b

    • SHA512

      20230e3603c1a64e603ca0c3661a30b370dcb976f7a64b179916fa323027c21f54e5b665bc68ea61c365e545583d0e85ec8fa6984b7b0442cc923c1f686b107e

    • SSDEEP

      192:2qWhQoyMKitixUQw4Qkpii96RiEQYcK00QkpiirqWhQovKitixUkJ:2qWhQoys4Qkpii96RiEQYcK00QkpiirW

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

    • Executes dropped EXE

    • Renames itself

    • Creates/modifies Cron job

      Cron allows running tasks on a schedule, and is commonly used for malware persistence.

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks