General

  • Target

    bins.sh

  • Size

    10KB

  • Sample

    241026-29n19sxrfk

  • MD5

    3e00046b3da3e4dc1b9ca8db4c15ee60

  • SHA1

    66b7911c6ae8a615c77ee73ae89044bedac98cbb

  • SHA256

    ec8af24e9cb59937c1529d65bb641ab4b34d65490ab0de23fe4acfa5213dcde8

  • SHA512

    e767c28d9a781e03bbf4bd5a43e8e087dd9529e64433fe2fd47387c1286599e13c5a8a2c67109f97272cf403d002ac6cb071a17ed310b877e11f172f4a96c1eb

  • SSDEEP

    96:7k56t6x6DwoLGroGRIosbaqwuZsN56t6x6Dwolz8NGroGR2BosbaqbBAdJa7jwB:7k0wsDwoZosbaqwuZsOwsDwoQosbaqM

Malware Config

Targets

    • Target

      bins.sh

    • Size

      10KB

    • MD5

      3e00046b3da3e4dc1b9ca8db4c15ee60

    • SHA1

      66b7911c6ae8a615c77ee73ae89044bedac98cbb

    • SHA256

      ec8af24e9cb59937c1529d65bb641ab4b34d65490ab0de23fe4acfa5213dcde8

    • SHA512

      e767c28d9a781e03bbf4bd5a43e8e087dd9529e64433fe2fd47387c1286599e13c5a8a2c67109f97272cf403d002ac6cb071a17ed310b877e11f172f4a96c1eb

    • SSDEEP

      96:7k56t6x6DwoLGroGRIosbaqwuZsN56t6x6Dwolz8NGroGR2BosbaqbBAdJa7jwB:7k0wsDwoZosbaqwuZsOwsDwoQosbaqM

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

    • Executes dropped EXE

    • Renames itself

    • Creates/modifies Cron job

      Cron allows running tasks on a schedule, and is commonly used for malware persistence.

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks