General

  • Target

    bins.sh

  • Size

    10KB

  • Sample

    241030-leq95s1alq

  • MD5

    da3b92c4dad226dd6729f3a1f807fb13

  • SHA1

    6b1d847767aa16313ab120d227a789dc984049b5

  • SHA256

    81af2299d4983bd3a33e33449d5ccdba9eb5ced0ce14e3b9dab580c756b491fd

  • SHA512

    8ef91971ae06189e507e163b6c344bc61ba6e8f0509a03ff5384a0d6216da39485f574037e9e85f5e5a9c0479ef3647daded63e4b34332714aad487c34c362f7

  • SSDEEP

    192:SWy78UDfxRiDXS6H4ebX8Af2mFRO2DMYkWy78UXxRiDXTw2J8Af2mHO2DMYT:SWy78UDf6H4eb1RO2DMYkWy78UKw2ZOY

Malware Config

Targets

    • Target

      bins.sh

    • Size

      10KB

    • MD5

      da3b92c4dad226dd6729f3a1f807fb13

    • SHA1

      6b1d847767aa16313ab120d227a789dc984049b5

    • SHA256

      81af2299d4983bd3a33e33449d5ccdba9eb5ced0ce14e3b9dab580c756b491fd

    • SHA512

      8ef91971ae06189e507e163b6c344bc61ba6e8f0509a03ff5384a0d6216da39485f574037e9e85f5e5a9c0479ef3647daded63e4b34332714aad487c34c362f7

    • SSDEEP

      192:SWy78UDfxRiDXS6H4ebX8Af2mFRO2DMYkWy78UXxRiDXTw2J8Af2mHO2DMYT:SWy78UDf6H4eb1RO2DMYkWy78UKw2ZOY

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

    • Executes dropped EXE

    • Renames itself

    • Creates/modifies Cron job

      Cron allows running tasks on a schedule, and is commonly used for malware persistence.

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks