Overview

overview

7

Static

static

1

bins.sh

ubuntu-18.04-amd64

7

bins.sh

debian-9-armhf

7

bins.sh

debian-9-mips

7

bins.sh

debian-9-mipsel

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bins.sh

  • Size

    10KB

  • Sample

    241101-hgcyrawngx

  • MD5

    6078cd6ad9578f2560a31060d98f7296

  • SHA1

    27849ad2b184814ce6051a35abe14ee76235e627

  • SHA256

    284a290974e3a9208d3fcf2dd6b3018254da9efb59403556f2564db62096fd49

  • SHA512

    d94e4004e23a47478e5bea0fdbdc12683b23b297d76ae0ab8113e727875b8ce10d098592e93d98cb860d61e5b9399295adbf479d775041c7c1fff0e55a78d861

  • SSDEEP

    192:HM4N08DKmO7OCb9HHmbHjJzbAfTmmjumMJJb6HHmbHmzbAfTrjumMJJg08DKmsMN:r08DKmO6Cb9HHmbHjJzbAfTmmjumMJJl

Score
7/10
antivmdefense_evasiondiscoveryexecutionlinuxpersistenceprivilege_escalatio

Malware Config

Targets

    • Target

      bins.sh

    • Size

      10KB

    • MD5

      6078cd6ad9578f2560a31060d98f7296

    • SHA1

      27849ad2b184814ce6051a35abe14ee76235e627

    • SHA256

      284a290974e3a9208d3fcf2dd6b3018254da9efb59403556f2564db62096fd49

    • SHA512

      d94e4004e23a47478e5bea0fdbdc12683b23b297d76ae0ab8113e727875b8ce10d098592e93d98cb860d61e5b9399295adbf479d775041c7c1fff0e55a78d861

    • SSDEEP

      192:HM4N08DKmO7OCb9HHmbHjJzbAfTmmjumMJJb6HHmbHmzbAfTrjumMJJg08DKmsMN:r08DKmO6Cb9HHmbHjJzbAfTmmjumMJJl

    Score
    7/10
    defense_evasiondiscoveryexecutionpersistenceprivilege_escalatioantivm

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

      defense_evasion

    • Executes dropped EXE

    • Renames itself

    • Creates/modifies Cron job

      Cron allows running tasks on a schedule, and is commonly used for malware persistence.

      executionpersistenceprivilege_escalatio

    • Enumerates running processes

      Discovers information about currently running processes on the system

    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks