General

  • Target

    bins.sh

  • Size

    10KB

  • Sample

    241029-2jslrszndw

  • MD5

    90fd1c72f06d7bdcd2f558c034a03a02

  • SHA1

    c82e4d5e35082f3a9227413a93a28e2d04791711

  • SHA256

    c4a1a0d845758541cdeb257531543b81126f9878d3aee9a651ded9406d77112c

  • SHA512

    5fc405aa74e8a1624c7a5c38736d227e71ce01082c98db74fc8e2432d3c887f0e3906dbe40e018c69828efa601e29c54a4e70b7956b43e8fee1402e596c0acfa

  • SSDEEP

    192:ZTj6rDXsWmLPYqia1EIeqW9qiqmfb0FVFfGSDXsWmLiTjrfb0FVDia1EIKqW9qiP:ZTj6psYqia1EINmfb0FVFfG83Tjrfb0m

Malware Config

Targets

    • Target

      bins.sh

    • Size

      10KB

    • MD5

      90fd1c72f06d7bdcd2f558c034a03a02

    • SHA1

      c82e4d5e35082f3a9227413a93a28e2d04791711

    • SHA256

      c4a1a0d845758541cdeb257531543b81126f9878d3aee9a651ded9406d77112c

    • SHA512

      5fc405aa74e8a1624c7a5c38736d227e71ce01082c98db74fc8e2432d3c887f0e3906dbe40e018c69828efa601e29c54a4e70b7956b43e8fee1402e596c0acfa

    • SSDEEP

      192:ZTj6rDXsWmLPYqia1EIeqW9qiqmfb0FVFfGSDXsWmLiTjrfb0FVDia1EIKqW9qiP:ZTj6psYqia1EINmfb0FVFfG83Tjrfb0m

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

    • Executes dropped EXE

    • Renames itself

    • Creates/modifies Cron job

      Cron allows running tasks on a schedule, and is commonly used for malware persistence.

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks