General
- Target pty
- Size 43KB
- Sample241027-paembsvpgt
- SHA256 d6f7fa3acf502d0b6e11197d80d305748999225be6f4eaf28e05a7c94facd432
Score
7/10
Malware Config
Targets
-
- Target pty
- Size 43KB
- SHA256 d6f7fa3acf502d0b6e11197d80d305748999225be6f4eaf28e05a7c94facd432
Score7/10-
Loads a kernel module
Loads a Linux kernel module, potentially to achieve persistence
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Indicator Removal: Timestomp
Adversaries may remove indicators of compromise from the host to evade detection.