General
-
Target
bins.sh
-
Size
10KB
-
Sample
241028-pz7dmsxmby
-
MD5
3da3ce71a18fc5d80d9044a4933d27f1
-
SHA1
a5eef453c7a93891070ca8d3ff35000471f51b53
-
SHA256
3e70a576a102f9254fdd6193396f16e2f00fbcbbd7164e9c4c799c7d4051e235
-
SHA512
bf3b38383df1933f055422edb7a70dd4b92211aac8bfb1c072334757f2a62b035cf81b3734117f10e55b05f711df5beb573043552826938a956a6f1e2d63c01b
-
SSDEEP
192:+muL6mtfnT4FrqarsYqScePT4FthePmuL6minT4tqarsYvPT4FtmD:mfnT4FEScePT4FtheMnT4/PT4FtmD
Static task
static1
Behavioral task
behavioral1
Sample
bins.sh
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
bins.sh
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
bins.sh
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral4
Sample
bins.sh
Resource
debian9-mipsel-20240226-en
Malware Config
Targets
-
-
Target
bins.sh
-
Size
10KB
-
MD5
3da3ce71a18fc5d80d9044a4933d27f1
-
SHA1
a5eef453c7a93891070ca8d3ff35000471f51b53
-
SHA256
3e70a576a102f9254fdd6193396f16e2f00fbcbbd7164e9c4c799c7d4051e235
-
SHA512
bf3b38383df1933f055422edb7a70dd4b92211aac8bfb1c072334757f2a62b035cf81b3734117f10e55b05f711df5beb573043552826938a956a6f1e2d63c01b
-
SSDEEP
192:+muL6mtfnT4FrqarsYqScePT4FthePmuL6minT4tqarsYvPT4FtmD:mfnT4FEScePT4FtheMnT4/PT4FtmD
-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
-
Renames itself
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
MITRE ATT&CK Enterprise v15
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1