General

  • Target

    bins.sh

  • Size

    10KB

  • Sample

    241027-aebc5syldq

  • MD5

    b2db94a95f3a12911c7e79383b2e9f18

  • SHA1

    17b862a1f3cda3d5cbfb97bc0bcbd640f72f4fd3

  • SHA256

    62b56e0ce47e5f3e31d54a00af53dda8eb3cf7013c1169b5ed29d3ab6d6b954c

  • SHA512

    3b76d645c8332a5801de9ec5563c4376494571a0736d91e22743912fb8c2b2b3670146be65fa21f4b9a8a080d77960aa2f96e6a437a5f58f219da6c0e23f36c6

  • SSDEEP

    192:HfsfQf5fkfMfaLD/WzzdGflUflcflNflQflcflLVzDwrSaqbNhxoZluTFhm9l+I5:/WClO2aLD/WzzdG6mLiKNPZxhxoZluT4

Malware Config

Targets

    • Target

      bins.sh

    • Size

      10KB

    • MD5

      b2db94a95f3a12911c7e79383b2e9f18

    • SHA1

      17b862a1f3cda3d5cbfb97bc0bcbd640f72f4fd3

    • SHA256

      62b56e0ce47e5f3e31d54a00af53dda8eb3cf7013c1169b5ed29d3ab6d6b954c

    • SHA512

      3b76d645c8332a5801de9ec5563c4376494571a0736d91e22743912fb8c2b2b3670146be65fa21f4b9a8a080d77960aa2f96e6a437a5f58f219da6c0e23f36c6

    • SSDEEP

      192:HfsfQf5fkfMfaLD/WzzdGflUflcflNflQflcflLVzDwrSaqbNhxoZluTFhm9l+I5:/WClO2aLD/WzzdG6mLiKNPZxhxoZluT4

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

    • Executes dropped EXE

    • Renames itself

    • Creates/modifies Cron job

      Cron allows running tasks on a schedule, and is commonly used for malware persistence.

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks